./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 57096758 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash dd6e2d2ad1797ddfadd8a282d4f838b00653dd01 .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-5709675 [2021-10-15 20:14:24,946 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-15 20:14:24,948 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-15 20:14:24,994 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-15 20:14:24,995 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-15 20:14:25,000 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-15 20:14:25,003 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-15 20:14:25,008 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-15 20:14:25,011 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-15 20:14:25,017 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-15 20:14:25,018 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-15 20:14:25,020 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-15 20:14:25,021 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-15 20:14:25,024 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-15 20:14:25,026 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-15 20:14:25,028 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-15 20:14:25,031 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-15 20:14:25,032 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-15 20:14:25,040 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-15 20:14:25,049 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-15 20:14:25,053 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-15 20:14:25,055 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-15 20:14:25,063 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-15 20:14:25,064 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-15 20:14:25,075 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-15 20:14:25,075 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-15 20:14:25,076 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-15 20:14:25,078 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-15 20:14:25,079 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-15 20:14:25,081 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-15 20:14:25,081 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-15 20:14:25,083 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-15 20:14:25,085 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-15 20:14:25,086 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-15 20:14:25,088 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-15 20:14:25,089 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-15 20:14:25,090 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-15 20:14:25,090 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-15 20:14:25,090 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-15 20:14:25,092 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-15 20:14:25,092 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-15 20:14:25,094 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-10-15 20:14:25,149 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-15 20:14:25,150 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-15 20:14:25,151 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-15 20:14:25,151 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-15 20:14:25,153 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-15 20:14:25,154 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-15 20:14:25,154 INFO L138 SettingsManager]: * Use SBE=true [2021-10-15 20:14:25,154 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-10-15 20:14:25,155 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-10-15 20:14:25,155 INFO L138 SettingsManager]: * Use old map elimination=false [2021-10-15 20:14:25,156 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-10-15 20:14:25,157 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-10-15 20:14:25,157 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-10-15 20:14:25,157 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-15 20:14:25,157 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-15 20:14:25,158 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-10-15 20:14:25,158 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-15 20:14:25,158 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-15 20:14:25,159 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-15 20:14:25,159 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-10-15 20:14:25,159 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-10-15 20:14:25,159 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-10-15 20:14:25,160 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-15 20:14:25,160 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-15 20:14:25,160 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-10-15 20:14:25,160 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-15 20:14:25,162 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-10-15 20:14:25,163 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-15 20:14:25,163 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-15 20:14:25,163 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-15 20:14:25,163 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-15 20:14:25,164 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-15 20:14:25,165 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-10-15 20:14:25,165 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> dd6e2d2ad1797ddfadd8a282d4f838b00653dd01 [2021-10-15 20:14:25,464 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-15 20:14:25,501 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-15 20:14:25,505 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-15 20:14:25,507 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-15 20:14:25,508 INFO L275 PluginConnector]: CDTParser initialized [2021-10-15 20:14:25,509 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2021-10-15 20:14:25,602 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/data/155bf8272/7741b56a57034e429e31e9f11772903d/FLAG855b80c5b [2021-10-15 20:14:26,318 INFO L306 CDTParser]: Found 1 translation units. [2021-10-15 20:14:26,321 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2021-10-15 20:14:26,365 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/data/155bf8272/7741b56a57034e429e31e9f11772903d/FLAG855b80c5b [2021-10-15 20:14:26,458 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/data/155bf8272/7741b56a57034e429e31e9f11772903d [2021-10-15 20:14:26,468 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-15 20:14:26,472 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-15 20:14:26,476 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-15 20:14:26,476 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-15 20:14:26,480 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-15 20:14:26,481 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 08:14:26" (1/1) ... [2021-10-15 20:14:26,483 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62428d26 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:26, skipping insertion in model container [2021-10-15 20:14:26,484 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 08:14:26" (1/1) ... [2021-10-15 20:14:26,492 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-15 20:14:26,604 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-15 20:14:26,830 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c[1545,1558] [2021-10-15 20:14:27,277 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-15 20:14:27,288 INFO L203 MainTranslator]: Completed pre-run [2021-10-15 20:14:27,303 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c[1545,1558] [2021-10-15 20:14:27,433 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-15 20:14:27,470 INFO L208 MainTranslator]: Completed translation [2021-10-15 20:14:27,471 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27 WrapperNode [2021-10-15 20:14:27,472 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-15 20:14:27,473 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-15 20:14:27,473 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-15 20:14:27,473 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-15 20:14:27,481 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:27,537 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:27,886 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-15 20:14:27,887 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-15 20:14:27,887 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-15 20:14:27,887 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-15 20:14:27,896 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:27,897 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:27,971 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:27,971 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:28,361 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:28,506 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:28,540 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:28,634 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-15 20:14:28,648 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-15 20:14:28,649 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-15 20:14:28,649 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-15 20:14:28,651 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (1/1) ... [2021-10-15 20:14:28,661 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:14:28,688 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:14:28,729 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:14:28,811 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-10-15 20:14:28,869 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-15 20:14:28,870 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-15 20:14:28,870 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-15 20:14:28,870 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-15 20:14:39,776 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-15 20:14:39,777 INFO L299 CfgBuilder]: Removed 1377 assume(true) statements. [2021-10-15 20:14:39,788 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 08:14:39 BoogieIcfgContainer [2021-10-15 20:14:39,788 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-15 20:14:39,789 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-10-15 20:14:39,789 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-10-15 20:14:39,793 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-10-15 20:14:39,794 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-15 20:14:39,795 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 15.10 08:14:26" (1/3) ... [2021-10-15 20:14:39,796 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@56ab111d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.10 08:14:39, skipping insertion in model container [2021-10-15 20:14:39,796 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-15 20:14:39,796 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 08:14:27" (2/3) ... [2021-10-15 20:14:39,797 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@56ab111d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.10 08:14:39, skipping insertion in model container [2021-10-15 20:14:39,797 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-15 20:14:39,797 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 08:14:39" (3/3) ... [2021-10-15 20:14:39,798 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product11.cil.c [2021-10-15 20:14:39,857 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-10-15 20:14:39,857 INFO L360 BuchiCegarLoop]: Hoare is false [2021-10-15 20:14:39,857 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-10-15 20:14:39,858 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-10-15 20:14:39,858 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-10-15 20:14:39,858 INFO L364 BuchiCegarLoop]: Difference is false [2021-10-15 20:14:39,858 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-10-15 20:14:39,858 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-10-15 20:14:40,025 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6083 states, 6082 states have (on average 1.8900032883919764) internal successors, (11495), 6082 states have internal predecessors, (11495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:14:40,276 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1234 [2021-10-15 20:14:40,276 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-15 20:14:40,277 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-15 20:14:40,314 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:14:40,314 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:14:40,315 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-10-15 20:14:40,338 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6083 states, 6082 states have (on average 1.8900032883919764) internal successors, (11495), 6082 states have internal predecessors, (11495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:14:40,458 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1234 [2021-10-15 20:14:40,459 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-15 20:14:40,459 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-15 20:14:40,470 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:14:40,470 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:14:40,485 INFO L791 eck$LassoCheckResult]: Stem: 3717#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5961#L-1true havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 2140#L3410true havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 913#L3418true main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 4836#L1172true assume 0 != main_~tmp~15; 6072#L1145true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3180#L2802true havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 4775#L569true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 4471#L594true bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 856#L3080true assume 0 == initPersonOnFloor_~floor; 3772#L3081true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2912#L3188-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1421#L2872true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4349#L2884-2true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4784#L1428true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 3602#L1480true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 5214#L670true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2052#L671true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 2953#L1445true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 5608#L1466true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 87#L675true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 2630#L776true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 482#L2809true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 4860#L2836true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 2000#L2713true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 4762#L2097true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5083#L1428-1true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 4472#L2101true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1571#L2114true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 127#L2250true assume !(0 != timeShift_~tmp___9~3); 2762#L2341true assume !(1 == ~doorState~0); 221#L2341-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1446#L2809-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 16#L2836-3true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 5287#L2713-1true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 4449#L1980true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 3048#L1428-2true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 3836#L1993true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 107#L2349true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2706#L2037true assume !(1 == ~currentHeading~0); 480#L2047true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 804#L2047-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6067#L2053-5true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1068#L801true assume !(-1 == ~expectedDirection~0); 3001#L813true assume !(1 == ~expectedDirection~0); 1249#L814true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4178#L1428-4true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 3958#L1480-3true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1238#L670-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 4165#L671-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1839#L1445-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1987#L1466-12true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 4974#L675-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4738#L776-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 4158#L2809-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 3045#L2836-25true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 4146#L2713-3true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 976#L2097-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1824#L1428-5true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 116#L2101-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 5263#L2114-1true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 5503#L2250-1true assume !(0 != timeShift_~tmp___9~3); 4066#L2341-3true assume !(1 == ~doorState~0); 2227#L2341-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 2467#L2809-28true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 3411#L2836-28true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 5946#L2713-4true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 4106#L1980-2true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5633#L1428-6true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 5648#L1993-2true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 4812#L2349-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5705#L2037-3true assume !(1 == ~currentHeading~0); 5756#L2047-9true assume !(0 == ~currentFloorID~0); 2466#L2047-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4232#L2053-11true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 618#L801-1true assume !(-1 == ~expectedDirection~0); 5935#L813-1true assume !(1 == ~expectedDirection~0); 5635#L814-1true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4317#L1428-8true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 4404#L1480-6true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 4939#L670-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1066#L732-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 3316#L1445-29true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 3727#L1466-29true __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 2192#L736-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1891#L776-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 3882#L2809-50true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5168#L2836-50true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 1790#L2713-6true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 5727#L2097-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 926#L1428-9true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 2586#L2101-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3035#L2114-2true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 2512#L2250-2true assume !(0 != timeShift_~tmp___9~3); 2293#L2341-6true assume !(1 == ~doorState~0); 4960#L2341-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 2932#L2809-53true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5473#L2836-53true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 3637#L2713-7true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 3864#L1980-4true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1261#L1428-10true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 5821#L1993-4true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 5244#L2349-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5406#L2037-6true assume !(1 == ~currentHeading~0); 4271#L2047-18true assume !(0 == ~currentFloorID~0); 3883#L2047-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4149#L2053-17true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3649#L801-2true assume !(-1 == ~expectedDirection~0); 3950#L813-2true assume !(1 == ~expectedDirection~0); 4548#L814-2true havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1097#L569-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 441#L594-1true bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1823#L3080-1true assume 0 == initPersonOnFloor_~floor; 5768#L3081-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1738#L3188-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5836#L2872-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 492#L2884-5true havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4635#L1428-12true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 1343#L1480-9true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 4608#L670-3true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3541#L732-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1335#L1445-41true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1216#L1466-41true __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 3959#L736-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 5543#L776-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 5581#L2809-75true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 74#L2836-75true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 848#L2713-9true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 5850#L2097-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4398#L1428-13true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 5586#L2101-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 5033#L2114-3true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 3207#L2250-3true assume !(0 != timeShift_~tmp___9~3); 1397#L2341-9true assume !(1 == ~doorState~0); 3183#L2341-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 2568#L2809-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 3703#L2836-78true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 2103#L2713-10true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 2787#L1980-6true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 233#L1428-14true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 2341#L1993-6true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 351#L2349-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 393#L2037-9true assume !(1 == ~currentHeading~0); 3617#L2047-27true assume !(0 == ~currentFloorID~0); 1773#L2047-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1279#L2053-23true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1098#L801-3true assume !(-1 == ~expectedDirection~0); 5046#L813-3true assume !(1 == ~expectedDirection~0); 1588#L814-3true cleanup_~i~2 := 0; 2400#L977-2true [2021-10-15 20:14:40,488 INFO L793 eck$LassoCheckResult]: Loop: 2400#L977-2true assume !false; 3742#L978true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3147#L981true assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 5985#L1279true cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 4151#L985true assume 1 != cleanup_~tmp___0~4; 5308#L985-1true havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 3992#L2809-100true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 3513#L2836-100true anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 4941#L1536true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 5248#L1600true isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 3294#L1613true cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 2184#L997true assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5242#L1428-16true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 2062#L1480-12true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2045#L670-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2101#L671-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 3681#L1445-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1799#L1466-48true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 3403#L675-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4163#L776-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 2028#L2809-105true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 1230#L2836-105true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 5100#L2713-12true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 2952#L2097-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5461#L1428-17true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 5013#L2101-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4278#L2114-4true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 1186#L2250-4true assume !(0 != timeShift_~tmp___9~3); 1745#L2341-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4693#L2341-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1820#L2809-108true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 1135#L2836-108true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 1046#L2713-13true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 1892#L1980-8true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 2530#L1428-18true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 2798#L1993-8true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 1290#L2349-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2849#L2037-12true assume !(1 == ~currentHeading~0); 2964#L2047-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1766#L2047-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3581#L2053-29true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3492#L801-4true assume !(-1 == ~expectedDirection~0); 5472#L813-4true assume !(1 == ~expectedDirection~0); 3090#L814-4true cleanup_~i~2 := 1 + cleanup_~i~2; 2400#L977-2true [2021-10-15 20:14:40,495 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:14:40,496 INFO L82 PathProgramCache]: Analyzing trace with hash -1728832092, now seen corresponding path program 1 times [2021-10-15 20:14:40,507 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:14:40,508 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2002947667] [2021-10-15 20:14:40,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:14:40,510 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:14:40,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:14:41,154 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:14:41,155 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:14:41,156 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2002947667] [2021-10-15 20:14:41,157 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2002947667] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:14:41,157 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:14:41,157 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-15 20:14:41,160 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [475662050] [2021-10-15 20:14:41,166 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-15 20:14:41,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:14:41,168 INFO L82 PathProgramCache]: Analyzing trace with hash -2080652541, now seen corresponding path program 1 times [2021-10-15 20:14:41,168 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:14:41,168 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2126029385] [2021-10-15 20:14:41,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:14:41,169 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:14:41,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:14:41,251 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:14:41,251 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:14:41,251 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2126029385] [2021-10-15 20:14:41,252 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2126029385] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:14:41,252 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:14:41,252 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-15 20:14:41,253 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [477953180] [2021-10-15 20:14:41,254 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-15 20:14:41,256 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-15 20:14:41,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-15 20:14:41,274 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-15 20:14:41,297 INFO L87 Difference]: Start difference. First operand has 6083 states, 6082 states have (on average 1.8900032883919764) internal successors, (11495), 6082 states have internal predecessors, (11495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:14:43,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-15 20:14:43,230 INFO L93 Difference]: Finished difference Result 12213 states and 22923 transitions. [2021-10-15 20:14:43,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-15 20:14:43,233 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 12213 states and 22923 transitions. [2021-10-15 20:14:43,361 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2596 [2021-10-15 20:14:43,480 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 12213 states to 12149 states and 22846 transitions. [2021-10-15 20:14:43,482 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12149 [2021-10-15 20:14:43,499 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12149 [2021-10-15 20:14:43,499 INFO L73 IsDeterministic]: Start isDeterministic. Operand 12149 states and 22846 transitions. [2021-10-15 20:14:43,526 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-15 20:14:43,526 INFO L681 BuchiCegarLoop]: Abstraction has 12149 states and 22846 transitions. [2021-10-15 20:14:43,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12149 states and 22846 transitions. [2021-10-15 20:14:43,858 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12149 to 11619. [2021-10-15 20:14:43,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11619 states, 11619 states have (on average 1.8888888888888888) internal successors, (21947), 11618 states have internal predecessors, (21947), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:14:43,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11619 states to 11619 states and 21947 transitions. [2021-10-15 20:14:43,946 INFO L704 BuchiCegarLoop]: Abstraction has 11619 states and 21947 transitions. [2021-10-15 20:14:43,946 INFO L587 BuchiCegarLoop]: Abstraction has 11619 states and 21947 transitions. [2021-10-15 20:14:43,946 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-10-15 20:14:43,946 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11619 states and 21947 transitions. [2021-10-15 20:14:44,025 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2372 [2021-10-15 20:14:44,025 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-15 20:14:44,026 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-15 20:14:44,032 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:14:44,033 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:14:44,034 INFO L791 eck$LassoCheckResult]: Stem: 23749#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 23750#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 22175#L3410 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 20306#L3418 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 20307#L1172 assume 0 != main_~tmp~15; 24422#L1145 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 23306#L2802 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 23307#L569 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 20292#L594 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 20194#L3080 assume 0 == initPersonOnFloor_~floor; 20195#L3081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 18330#L3188-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 21160#L2872 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19203#L2884-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24175#L1428 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 23661#L1480 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 23662#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 23301#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 21923#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19147#L1466-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 20660#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 18818#L776 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 26192#L2809 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 26188#L2836 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 26183#L2713 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 26180#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 26176#L1428-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 26174#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26171#L2114 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 26170#L2250 assume !(0 != timeShift_~tmp___9~3); 26169#L2341 assume !(1 == ~doorState~0); 26168#L2341-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 26161#L2809-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 26156#L2836-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 26155#L2713-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 26154#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 26085#L1428-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 26083#L1993 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 26081#L2349 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 26082#L2037 assume !(1 == ~currentHeading~0); 19461#L2047 assume !(0 == ~currentFloorID~0); 19462#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26424#L2053-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 26422#L801 assume !(-1 == ~expectedDirection~0); 26419#L813 assume !(1 == ~expectedDirection~0); 20887#L814 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 20888#L1428-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 26312#L1480-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 26311#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 23674#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 20703#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19478#L1466-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 21105#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 20762#L776-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25236#L2809-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25176#L2836-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25171#L2713-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 25157#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25150#L1428-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 25143#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 25141#L2114-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 25140#L2250-1 assume !(0 != timeShift_~tmp___9~3); 25002#L2341-3 assume !(1 == ~doorState~0); 24937#L2341-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 24876#L2809-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 24873#L2836-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 24871#L2713-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 24824#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24822#L1428-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 24821#L1993-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 24819#L2349-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 24818#L2037-3 assume !(1 == ~currentHeading~0); 24762#L2047-9 assume !(0 == ~currentFloorID~0); 19650#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23268#L2053-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 19747#L801-1 assume !(-1 == ~expectedDirection~0); 19748#L813-1 assume !(1 == ~expectedDirection~0); 23124#L814-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24727#L1428-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 25504#L1480-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 24813#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 20575#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 20576#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19511#L1466-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 22239#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 20037#L776-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25906#L2809-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25901#L2836-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25900#L2713-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 25882#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25872#L1428-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 25652#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 25649#L2114-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 25647#L2250-2 assume !(0 != timeShift_~tmp___9~3); 25644#L2341-6 assume !(1 == ~doorState~0); 25642#L2341-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25530#L2809-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25520#L2836-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25518#L2713-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 25515#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25511#L1428-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 25508#L1993-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 25505#L2349-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 24814#L2037-6 assume !(1 == ~currentHeading~0); 24115#L2047-18 assume !(0 == ~currentFloorID~0); 22468#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27847#L2053-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 27845#L801-2 assume !(-1 == ~expectedDirection~0); 27842#L813-2 assume !(1 == ~expectedDirection~0); 27840#L814-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 27837#L569-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 27833#L594-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 27832#L3080-1 assume 0 == initPersonOnFloor_~floor; 27797#L3081-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21632#L3188-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 21633#L2872-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19484#L2884-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 19485#L1428-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 25961#L1480-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 25959#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 23610#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 21015#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19446#L1466-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 20833#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 19900#L776-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25429#L2809-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25420#L2836-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25418#L2713-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 25356#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25345#L1428-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 25322#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 25321#L2114-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 25319#L2250-3 assume !(0 != timeShift_~tmp___9~3); 25318#L2341-9 assume !(1 == ~doorState~0); 25317#L2341-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25316#L2809-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25311#L2836-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25310#L2713-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 25308#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25306#L1428-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 25285#L1993-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 25280#L2349-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 25281#L2037-9 assume !(1 == ~currentHeading~0); 23675#L2047-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 20340#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21676#L2053-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 29232#L801-3 assume !(-1 == ~expectedDirection~0); 29229#L813-3 assume !(1 == ~expectedDirection~0); 28553#L814-3 cleanup_~i~2 := 0; 28552#L977-2 [2021-10-15 20:14:44,035 INFO L793 eck$LassoCheckResult]: Loop: 28552#L977-2 assume !false; 28551#L978 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 28550#L981 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 28549#L1279 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 28548#L985 assume 1 != cleanup_~tmp___0~4; 28547#L985-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 28546#L2809-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 23585#L2836-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 23586#L1536 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 27782#L1600 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 26412#L1613 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 26340#L997 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24612#L1428-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 22091#L1480-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 22063#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 22064#L671-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 22132#L1445-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 21095#L1466-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 21713#L675-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 23497#L776-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 22035#L2809-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 20850#L2836-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 20851#L2713-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 23097#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 23098#L1428-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 24509#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 19004#L2114-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 20786#L2250-4 assume !(0 != timeShift_~tmp___9~3); 20787#L2341-12 assume 1 == ~doorState~0;~doorState~0 := 0; 21640#L2341-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 21737#L2809-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 19416#L2836-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 20539#L2713-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 20540#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 21847#L1428-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 22639#L1993-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 20950#L2349-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 20951#L2037-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 22983#L3383-21 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 21692#L2041-36 assume !(0 != continueInDirection_~tmp~21); 21664#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 19056#L2053-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 28558#L801-4 assume !(-1 == ~expectedDirection~0); 28555#L813-4 assume !(1 == ~expectedDirection~0); 28554#L814-4 cleanup_~i~2 := 1 + cleanup_~i~2; 28552#L977-2 [2021-10-15 20:14:44,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:14:44,037 INFO L82 PathProgramCache]: Analyzing trace with hash -1092943826, now seen corresponding path program 1 times [2021-10-15 20:14:44,037 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:14:44,037 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1799989540] [2021-10-15 20:14:44,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:14:44,038 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:14:44,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:14:44,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:14:44,164 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:14:44,164 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1799989540] [2021-10-15 20:14:44,165 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1799989540] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:14:44,165 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:14:44,165 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-15 20:14:44,166 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1608865304] [2021-10-15 20:14:44,166 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-15 20:14:44,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:14:44,167 INFO L82 PathProgramCache]: Analyzing trace with hash 1785765021, now seen corresponding path program 1 times [2021-10-15 20:14:44,168 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:14:44,168 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [558845437] [2021-10-15 20:14:44,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:14:44,169 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:14:44,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:14:44,230 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:14:44,231 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:14:44,232 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [558845437] [2021-10-15 20:14:44,233 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [558845437] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:14:44,233 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:14:44,234 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-15 20:14:44,234 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [648362974] [2021-10-15 20:14:44,235 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-15 20:14:44,236 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-15 20:14:44,237 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-15 20:14:44,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-15 20:14:44,240 INFO L87 Difference]: Start difference. First operand 11619 states and 21947 transitions. cyclomatic complexity: 10329 Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:14:44,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-15 20:14:44,817 INFO L93 Difference]: Finished difference Result 17320 states and 32695 transitions. [2021-10-15 20:14:44,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-15 20:14:44,818 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17320 states and 32695 transitions. [2021-10-15 20:14:45,234 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3571 [2021-10-15 20:14:45,354 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17320 states to 17320 states and 32695 transitions. [2021-10-15 20:14:45,355 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17320 [2021-10-15 20:14:45,378 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17320 [2021-10-15 20:14:45,378 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17320 states and 32695 transitions. [2021-10-15 20:14:45,407 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-15 20:14:45,407 INFO L681 BuchiCegarLoop]: Abstraction has 17320 states and 32695 transitions. [2021-10-15 20:14:45,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17320 states and 32695 transitions. [2021-10-15 20:14:45,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17320 to 17114. [2021-10-15 20:14:45,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17114 states, 17114 states have (on average 1.8889213509407503) internal successors, (32327), 17113 states have internal predecessors, (32327), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:14:45,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17114 states to 17114 states and 32327 transitions. [2021-10-15 20:14:45,990 INFO L704 BuchiCegarLoop]: Abstraction has 17114 states and 32327 transitions. [2021-10-15 20:14:45,990 INFO L587 BuchiCegarLoop]: Abstraction has 17114 states and 32327 transitions. [2021-10-15 20:14:45,990 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-10-15 20:14:45,991 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17114 states and 32327 transitions. [2021-10-15 20:14:46,089 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3471 [2021-10-15 20:14:46,089 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-15 20:14:46,089 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-15 20:14:46,097 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:14:46,098 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:14:46,224 INFO L791 eck$LassoCheckResult]: Stem: 52597#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 52598#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 51070#L3410 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 49245#L3418 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 49246#L1172 assume 0 != main_~tmp~15; 53205#L1145 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 52182#L2802 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 52183#L569 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 49229#L594 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 49132#L3080 assume 0 == initPersonOnFloor_~floor; 49133#L3081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 47280#L3188-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 50088#L2872 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 48149#L2884-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 52993#L1428 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 52518#L1480 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 52519#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 52178#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 50829#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 48091#L1466-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 49593#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 47763#L776 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 55123#L2809 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 55119#L2836 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 55118#L2713 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 55100#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 55095#L1428-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 55087#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 55084#L2114 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 55082#L2250 assume !(0 != timeShift_~tmp___9~3); 55081#L2341 assume !(1 == ~doorState~0); 55080#L2341-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 55078#L2809-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 55066#L2836-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 55065#L2713-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 54984#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54938#L1428-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 54937#L1993 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 54935#L2349 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 54936#L2037 assume !(1 == ~currentHeading~0); 48404#L2047 assume !(0 == ~currentFloorID~0); 48405#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55148#L2053-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 55145#L801 assume !(-1 == ~expectedDirection~0); 55142#L813 assume !(1 == ~expectedDirection~0); 55129#L814 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 55128#L1428-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 55127#L1480-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 55126#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 52531#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 49631#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 48424#L1466-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 50033#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 49691#L776-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54195#L2809-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54192#L2836-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54191#L2713-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 54182#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54179#L1428-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 54155#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 54144#L2114-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 54142#L2250-1 assume !(0 != timeShift_~tmp___9~3); 54132#L2341-3 assume !(1 == ~doorState~0); 54129#L2341-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 53629#L2809-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 53626#L2836-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 53624#L2713-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 53522#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 53520#L1428-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 53519#L1993-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 53517#L2349-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 53515#L2037-3 assume !(1 == ~currentHeading~0); 53476#L2047-9 assume !(0 == ~currentFloorID~0); 53478#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 56786#L2053-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 60494#L801-1 assume !(-1 == ~expectedDirection~0); 60495#L813-1 assume !(1 == ~expectedDirection~0); 52013#L814-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 52971#L1428-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 52972#L1480-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 53016#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 49509#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 49510#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 48455#L1466-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 51135#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 48977#L776-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54625#L2809-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54620#L2836-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54619#L2713-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 54617#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54618#L1428-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 54586#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 54585#L2114-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 54583#L2250-2 assume !(0 != timeShift_~tmp___9~3); 54582#L2341-6 assume !(1 == ~doorState~0); 54580#L2341-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54579#L2809-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54574#L2836-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54551#L2713-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 54546#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54391#L1428-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 54343#L1993-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 54257#L2349-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 53507#L2037-6 assume !(1 == ~currentHeading~0); 52944#L2047-18 assume !(0 == ~currentFloorID~0); 52946#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57260#L2053-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 57257#L801-2 assume !(-1 == ~expectedDirection~0); 57254#L813-2 assume !(1 == ~expectedDirection~0); 57252#L814-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 57238#L569-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 57233#L594-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 57230#L3080-1 assume 0 == initPersonOnFloor_~floor; 57169#L3081-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 55140#L3188-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 55139#L2872-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 54670#L2884-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54667#L1428-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 54665#L1480-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 54662#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 52468#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 49941#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 48388#L1466-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 49759#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 48841#L776-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54103#L2809-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54099#L2836-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54098#L2713-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 54096#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54097#L1428-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 54046#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 54045#L2114-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 54044#L2250-3 assume !(0 != timeShift_~tmp___9~3); 54043#L2341-9 assume !(1 == ~doorState~0); 54042#L2341-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54041#L2809-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54031#L2836-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54029#L2713-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 53963#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 53956#L1428-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 53954#L1993-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 53948#L2349-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 53949#L2037-9 assume !(1 == ~currentHeading~0); 52528#L2047-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 52529#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 59271#L2053-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 62198#L801-3 assume !(-1 == ~expectedDirection~0); 59717#L813-3 assume !(1 == ~expectedDirection~0); 59711#L814-3 cleanup_~i~2 := 0; 59710#L977-2 [2021-10-15 20:14:46,225 INFO L793 eck$LassoCheckResult]: Loop: 59710#L977-2 assume !false; 59709#L978 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 59708#L981 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 59707#L1279 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 59706#L985 assume 1 != cleanup_~tmp___0~4; 59705#L985-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 59704#L2809-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 59699#L2836-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 59688#L1536 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 59679#L1600 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 59678#L1613 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 51125#L997 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51126#L1428-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 50987#L1480-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 50962#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 50963#L671-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 51028#L681-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 51893#L692-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 48886#L703-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 48888#L714-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 52673#L776-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 59057#L2809-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 59056#L2836-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 59055#L2713-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 59049#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 59047#L1428-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 59041#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 59039#L2114-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 59037#L2250-4 assume !(0 != timeShift_~tmp___9~3); 59036#L2341-12 assume 1 == ~doorState~0;~doorState~0 := 0; 59035#L2341-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 59032#L2809-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 59027#L2836-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 59026#L2713-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 59024#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 58981#L1428-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 58980#L1993-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 58973#L2349-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 58971#L2037-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 53569#L3383-21 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 58970#L2041-36 assume !(0 != continueInDirection_~tmp~21); 51996#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58963#L2053-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 59728#L801-4 assume !(-1 == ~expectedDirection~0); 59713#L813-4 assume !(1 == ~expectedDirection~0); 59712#L814-4 cleanup_~i~2 := 1 + cleanup_~i~2; 59710#L977-2 [2021-10-15 20:14:46,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:14:46,229 INFO L82 PathProgramCache]: Analyzing trace with hash -1092943826, now seen corresponding path program 2 times [2021-10-15 20:14:46,229 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:14:46,230 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1144280898] [2021-10-15 20:14:46,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:14:46,230 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:14:46,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:14:46,429 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:14:46,430 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:14:46,430 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1144280898] [2021-10-15 20:14:46,431 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1144280898] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:14:46,431 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:14:46,431 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-15 20:14:46,431 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1689121603] [2021-10-15 20:14:46,432 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-15 20:14:46,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:14:46,434 INFO L82 PathProgramCache]: Analyzing trace with hash 1215428504, now seen corresponding path program 1 times [2021-10-15 20:14:46,434 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:14:46,435 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [265776532] [2021-10-15 20:14:46,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:14:46,435 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:14:46,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:14:46,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:14:46,752 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:14:46,753 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [265776532] [2021-10-15 20:14:46,753 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [265776532] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:14:46,753 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:14:46,753 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-10-15 20:14:46,754 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1638720393] [2021-10-15 20:14:46,754 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-15 20:14:46,754 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-15 20:14:46,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-10-15 20:14:46,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2021-10-15 20:14:46,756 INFO L87 Difference]: Start difference. First operand 17114 states and 32327 transitions. cyclomatic complexity: 15214 Second operand has 13 states, 13 states have (on average 3.5384615384615383) internal successors, (46), 13 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:15:13,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-15 20:15:13,932 INFO L93 Difference]: Finished difference Result 60897 states and 113165 transitions. [2021-10-15 20:15:13,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2021-10-15 20:15:13,935 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60897 states and 113165 transitions. [2021-10-15 20:15:14,380 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13621 [2021-10-15 20:15:14,776 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60897 states to 60897 states and 113165 transitions. [2021-10-15 20:15:14,777 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60897 [2021-10-15 20:15:14,856 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60897 [2021-10-15 20:15:14,856 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60897 states and 113165 transitions. [2021-10-15 20:15:14,934 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-15 20:15:14,934 INFO L681 BuchiCegarLoop]: Abstraction has 60897 states and 113165 transitions. [2021-10-15 20:15:14,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60897 states and 113165 transitions. [2021-10-15 20:15:16,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60897 to 38369. [2021-10-15 20:15:16,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38369 states, 38369 states have (on average 1.86348354140061) internal successors, (71500), 38368 states have internal predecessors, (71500), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:15:16,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38369 states to 38369 states and 71500 transitions. [2021-10-15 20:15:16,663 INFO L704 BuchiCegarLoop]: Abstraction has 38369 states and 71500 transitions. [2021-10-15 20:15:16,664 INFO L587 BuchiCegarLoop]: Abstraction has 38369 states and 71500 transitions. [2021-10-15 20:15:16,664 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-10-15 20:15:16,664 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38369 states and 71500 transitions. [2021-10-15 20:15:16,833 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8236 [2021-10-15 20:15:16,833 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-15 20:15:16,834 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-15 20:15:16,845 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:15:16,846 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:15:16,847 INFO L791 eck$LassoCheckResult]: Stem: 131196#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 131197#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 129398#L3410 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 127416#L3418 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 127417#L1172 assume 0 != main_~tmp~15; 132052#L1145 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 130681#L2802 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 130682#L569 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 127402#L594 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 127302#L3080 assume 0 == initPersonOnFloor_~floor; 127303#L3081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 125421#L3188-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 128303#L2872 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 126286#L2884-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 131732#L1428 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 131094#L1480 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 131095#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 130674#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 129118#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 126230#L1466-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 127779#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 125901#L776 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 134243#L2809 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 134239#L2836 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 134238#L2713 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 134220#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 134215#L1428-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 134207#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 134204#L2114 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 134202#L2250 assume !(0 != timeShift_~tmp___9~3); 134201#L2341 assume !(1 == ~doorState~0); 134200#L2341-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 134119#L2809-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 134114#L2836-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 134112#L2713-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 134065#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 134061#L1428-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 134060#L1993 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 134058#L2349 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 134059#L2037 assume !(1 == ~currentHeading~0); 126556#L2047 assume !(0 == ~currentFloorID~0); 126557#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134286#L2053-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 134269#L801 assume !(-1 == ~expectedDirection~0); 134257#L813 assume !(1 == ~expectedDirection~0); 134250#L814 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 134249#L1428-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 134248#L1480-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 134245#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 131111#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 127821#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 126573#L1466-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 128247#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 127880#L776-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133577#L2809-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133573#L2836-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133572#L2713-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 133566#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133564#L1428-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 133558#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 133554#L2114-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 133552#L2250-1 assume !(0 != timeShift_~tmp___9~3); 133496#L2341-3 assume !(1 == ~doorState~0); 133493#L2341-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133480#L2809-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133468#L2836-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 132839#L2713-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 132651#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 132645#L1428-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 132642#L1993-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 132637#L2349-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 132634#L2037-3 assume !(1 == ~currentHeading~0); 132514#L2047-9 assume !(0 == ~currentFloorID~0); 126747#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134301#L2053-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 134273#L801-1 assume !(-1 == ~expectedDirection~0); 134266#L813-1 assume !(1 == ~expectedDirection~0); 133779#L814-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133774#L1428-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 133773#L1480-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 132624#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 127693#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 127694#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 126608#L1466-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 129473#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 127142#L776-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133751#L2809-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133746#L2836-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133729#L2713-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 133723#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133701#L1428-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 133692#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 133687#L2114-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 133685#L2250-2 assume !(0 != timeShift_~tmp___9~3); 133684#L2341-6 assume !(1 == ~doorState~0); 133679#L2341-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133586#L2809-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133580#L2836-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133574#L2713-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 133497#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133494#L1428-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 133492#L1993-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 133491#L2349-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 132626#L2037-6 assume !(1 == ~currentHeading~0); 131670#L2047-18 assume !(0 == ~currentFloorID~0); 129719#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 136716#L2053-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 136697#L801-2 assume !(-1 == ~expectedDirection~0); 136689#L813-2 assume !(1 == ~expectedDirection~0); 136672#L814-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 135912#L569-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 135908#L594-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 135906#L3080-1 assume 0 == initPersonOnFloor_~floor; 135076#L3081-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 134272#L3188-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 134264#L2872-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 134115#L2884-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 134113#L1428-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 134111#L1480-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 134063#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 131041#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 128154#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 126541#L1466-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 127954#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 127003#L776-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133258#L2809-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133254#L2836-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133253#L2713-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 133251#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133252#L1428-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 133220#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 133219#L2114-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 133217#L2250-3 assume !(0 != timeShift_~tmp___9~3); 133216#L2341-9 assume !(1 == ~doorState~0); 133214#L2341-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133213#L2809-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133207#L2836-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133206#L2713-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 133205#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133126#L1428-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 133125#L1993-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 133123#L2349-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 133124#L2037-9 assume !(1 == ~currentHeading~0); 131112#L2047-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 131113#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 135150#L2053-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 159221#L801-3 assume !(-1 == ~expectedDirection~0); 159218#L813-3 assume !(1 == ~expectedDirection~0); 159212#L814-3 cleanup_~i~2 := 0; 159211#L977-2 [2021-10-15 20:15:16,849 INFO L793 eck$LassoCheckResult]: Loop: 159211#L977-2 assume !false; 159210#L978 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 157177#L981 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 157176#L1279 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 157175#L985 assume 1 != cleanup_~tmp___0~4; 156414#L985-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 156402#L2809-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 156371#L2836-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 156360#L1536 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 153419#L1600 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 153361#L1613 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 153291#L997 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 153290#L1428-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 153289#L1480-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 153288#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 134252#L671-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 153287#L1445-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 153292#L1466-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 153286#L675-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 131303#L776-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 154806#L2809-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 154805#L2836-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 154804#L2713-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 154803#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 132397#L1428-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 132149#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 126084#L2114-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 127903#L2250-4 assume !(0 != timeShift_~tmp___9~3); 127904#L2341-12 assume 1 == ~doorState~0;~doorState~0 := 0; 154524#L2341-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 140408#L2809-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 140405#L2836-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 140404#L2713-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 140401#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 140403#L1428-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 154841#L1993-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 154839#L2349-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 154840#L2037-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 160030#L3383-21 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 160031#L2041-36 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 136679#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 136677#L2053-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 159224#L801-4 assume !(-1 == ~expectedDirection~0); 159223#L813-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 159215#L1480-14 __utac_acc__Specification3_spec__2_#t~ret61 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~6 := __utac_acc__Specification3_spec__2_#t~ret61;havoc __utac_acc__Specification3_spec__2_#t~ret61; 159216#L818-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6); 159213#L814-4 cleanup_~i~2 := 1 + cleanup_~i~2; 159211#L977-2 [2021-10-15 20:15:16,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:15:16,850 INFO L82 PathProgramCache]: Analyzing trace with hash -1092943826, now seen corresponding path program 3 times [2021-10-15 20:15:16,850 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:15:16,851 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [450345831] [2021-10-15 20:15:16,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:15:16,851 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:15:16,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:15:16,958 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:15:16,959 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:15:16,959 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [450345831] [2021-10-15 20:15:16,960 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [450345831] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:15:16,960 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:15:16,960 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-15 20:15:16,960 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1649110473] [2021-10-15 20:15:16,961 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-15 20:15:16,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:15:16,962 INFO L82 PathProgramCache]: Analyzing trace with hash -1056852380, now seen corresponding path program 1 times [2021-10-15 20:15:16,962 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:15:16,963 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1804841859] [2021-10-15 20:15:16,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:15:16,964 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:15:16,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:15:17,017 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:15:17,017 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:15:17,018 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1804841859] [2021-10-15 20:15:17,018 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1804841859] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:15:17,018 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:15:17,018 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-15 20:15:17,019 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [583821273] [2021-10-15 20:15:17,019 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-15 20:15:17,020 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-15 20:15:17,020 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-15 20:15:17,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-15 20:15:17,021 INFO L87 Difference]: Start difference. First operand 38369 states and 71500 transitions. cyclomatic complexity: 33132 Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:15:18,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-15 20:15:18,465 INFO L93 Difference]: Finished difference Result 72628 states and 135009 transitions. [2021-10-15 20:15:18,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-15 20:15:18,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 72628 states and 135009 transitions. [2021-10-15 20:15:19,039 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 29887 [2021-10-15 20:15:19,451 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 72628 states to 72520 states and 134901 transitions. [2021-10-15 20:15:19,451 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 72520 [2021-10-15 20:15:19,521 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 72520 [2021-10-15 20:15:19,522 INFO L73 IsDeterministic]: Start isDeterministic. Operand 72520 states and 134901 transitions. [2021-10-15 20:15:19,617 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-15 20:15:19,617 INFO L681 BuchiCegarLoop]: Abstraction has 72520 states and 134901 transitions. [2021-10-15 20:15:19,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72520 states and 134901 transitions. [2021-10-15 20:15:20,799 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72520 to 47045. [2021-10-15 20:15:20,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47045 states, 47045 states have (on average 1.867786162185142) internal successors, (87870), 47044 states have internal predecessors, (87870), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:15:21,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47045 states to 47045 states and 87870 transitions. [2021-10-15 20:15:21,024 INFO L704 BuchiCegarLoop]: Abstraction has 47045 states and 87870 transitions. [2021-10-15 20:15:21,024 INFO L587 BuchiCegarLoop]: Abstraction has 47045 states and 87870 transitions. [2021-10-15 20:15:21,024 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-10-15 20:15:21,025 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47045 states and 87870 transitions. [2021-10-15 20:15:21,182 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11304 [2021-10-15 20:15:21,182 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-15 20:15:21,182 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-15 20:15:21,192 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:15:21,192 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-15 20:15:21,193 INFO L791 eck$LassoCheckResult]: Stem: 241927#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 241928#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 240288#L3410 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 238397#L3418 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 238398#L1172 assume 0 != main_~tmp~15; 242629#L1145 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 241465#L2802 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 241466#L569 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 238384#L594 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 238287#L3080 assume 0 == initPersonOnFloor_~floor; 238288#L3081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 236430#L3188-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 239259#L2872 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 237292#L2884-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 242378#L1428 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 241835#L1480 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 241836#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 241458#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 240038#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 237237#L1466-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 238747#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 236910#L776 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243312#L2809 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243307#L2836 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243303#L2713 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 243301#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243300#L1428-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 243296#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 243292#L2114 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 243290#L2250 assume !(0 != timeShift_~tmp___9~3); 243288#L2341 assume !(1 == ~doorState~0); 243282#L2341-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243103#L2809-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243097#L2836-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243096#L2713-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 243093#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243042#L1428-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 243037#L1993 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 243031#L2349 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 240975#L2037 assume !(1 == ~currentHeading~0); 237553#L2047 assume !(0 == ~currentFloorID~0); 237554#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 245381#L2053-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 245379#L801 assume !(-1 == ~expectedDirection~0); 245370#L813 assume !(1 == ~expectedDirection~0); 245219#L814 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245182#L1428-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 245179#L1480-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 245177#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 241849#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 238789#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 237570#L1466-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 239204#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 238849#L776-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 244242#L2809-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243950#L2836-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243945#L2713-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 243838#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243826#L1428-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 243815#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 243811#L2114-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 243809#L2250-1 assume !(0 != timeShift_~tmp___9~3); 243808#L2341-3 assume !(1 == ~doorState~0); 243807#L2341-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243804#L2809-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243800#L2836-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243197#L2713-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 243151#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243045#L1428-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 243039#L1993-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 243034#L2349-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 243033#L2037-3 assume !(1 == ~currentHeading~0); 242967#L2047-9 assume !(0 == ~currentFloorID~0); 237740#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 244253#L2053-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 244245#L801-1 assume !(-1 == ~expectedDirection~0); 243956#L813-1 assume !(1 == ~expectedDirection~0); 243842#L814-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243830#L1428-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 243818#L1480-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 243024#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 238667#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 238668#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 237603#L1466-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 240355#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 238131#L776-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 244050#L2809-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 244045#L2836-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 244044#L2713-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 244040#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 244038#L1428-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 244030#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 244029#L2114-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 244026#L2250-2 assume !(0 != timeShift_~tmp___9~3); 244020#L2341-6 assume !(1 == ~doorState~0); 244018#L2341-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 244016#L2809-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 244006#L2836-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 244004#L2713-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 243958#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243843#L1428-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 243831#L1993-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 243819#L2349-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 243026#L2037-6 assume !(1 == ~currentHeading~0); 242324#L2047-18 assume !(0 == ~currentFloorID~0); 240595#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 245146#L2053-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 245143#L801-2 assume !(-1 == ~expectedDirection~0); 245140#L813-2 assume !(1 == ~expectedDirection~0); 245138#L814-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 245135#L569-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 245131#L594-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 245127#L3080-1 assume 0 == initPersonOnFloor_~floor; 245100#L3081-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 245095#L3188-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 245094#L2872-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 245089#L2884-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245088#L1428-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 245087#L1480-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 245085#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 241781#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 239114#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 237538#L1466-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 238921#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 237989#L776-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243749#L2809-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243745#L2836-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243744#L2713-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 243742#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243743#L1428-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 243711#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 243710#L2114-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 243708#L2250-3 assume !(0 != timeShift_~tmp___9~3); 243707#L2341-9 assume !(1 == ~doorState~0); 243702#L2341-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243700#L2809-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243695#L2836-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243694#L2713-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 243586#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243574#L1428-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 243571#L1993-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 243569#L2349-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 243570#L2037-9 assume !(1 == ~currentHeading~0); 241850#L2047-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 241851#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 271556#L2053-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 275480#L801-3 assume !(-1 == ~expectedDirection~0); 275474#L813-3 assume !(1 == ~expectedDirection~0); 275463#L814-3 cleanup_~i~2 := 0; 275462#L977-2 [2021-10-15 20:15:21,194 INFO L793 eck$LassoCheckResult]: Loop: 275462#L977-2 assume !false; 275461#L978 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 275460#L981 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 275459#L1279 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 275458#L985 assume 1 != cleanup_~tmp___0~4; 275442#L985-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 275440#L2809-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 275434#L2836-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 275433#L1536 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 275371#L1600 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 275319#L1613 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 268279#L997 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 268280#L1428-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 268275#L1480-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 268276#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 268271#L671-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 268272#L1445-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 275302#L1466-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 268235#L675-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 268231#L776-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 268226#L2809-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 268225#L2836-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 268215#L2713-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 268199#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 268191#L1428-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 268184#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 268182#L2114-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 268180#L2250-4 assume !(0 != timeShift_~tmp___9~3); 268178#L2341-12 assume 1 == ~doorState~0;~doorState~0 := 0; 268179#L2341-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 268173#L2809-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 268170#L2836-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 268168#L2713-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 268169#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 281172#L1428-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 281171#L1993-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 268048#L2349-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 268049#L2037-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 278856#L3383-21 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 278853#L2041-36 assume !(0 != continueInDirection_~tmp~21); 278848#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 242830#L2053-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 278841#L801-4 assume !(-1 == ~expectedDirection~0); 278839#L813-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 275466#L1480-14 __utac_acc__Specification3_spec__2_#t~ret61 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~6 := __utac_acc__Specification3_spec__2_#t~ret61;havoc __utac_acc__Specification3_spec__2_#t~ret61; 275467#L818-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6); 275464#L814-4 cleanup_~i~2 := 1 + cleanup_~i~2; 275462#L977-2 [2021-10-15 20:15:21,195 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:15:21,195 INFO L82 PathProgramCache]: Analyzing trace with hash -1092943826, now seen corresponding path program 4 times [2021-10-15 20:15:21,196 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:15:21,196 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1989751810] [2021-10-15 20:15:21,196 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:15:21,197 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:15:21,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:15:21,280 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:15:21,280 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-15 20:15:21,281 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1989751810] [2021-10-15 20:15:21,281 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1989751810] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-15 20:15:21,281 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-15 20:15:21,282 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-15 20:15:21,282 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [914590521] [2021-10-15 20:15:21,283 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-15 20:15:21,283 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:15:21,283 INFO L82 PathProgramCache]: Analyzing trace with hash -1866199006, now seen corresponding path program 1 times [2021-10-15 20:15:21,284 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-15 20:15:21,284 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1757676003] [2021-10-15 20:15:21,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-15 20:15:21,285 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-15 20:15:21,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-10-15 20:15:21,298 INFO L354 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-10-15 20:15:21,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-10-15 20:15:21,356 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-10-15 20:15:23,870 INFO L210 LassoAnalysis]: Preferences: [2021-10-15 20:15:23,871 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-10-15 20:15:23,872 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-10-15 20:15:23,872 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-10-15 20:15:23,872 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-10-15 20:15:23,872 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:23,873 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-10-15 20:15:23,873 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-10-15 20:15:23,873 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration5_Loop [2021-10-15 20:15:23,873 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-10-15 20:15:23,874 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-10-15 20:15:23,918 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,925 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,928 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,936 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,941 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,962 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,987 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:23,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,002 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,027 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,032 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,054 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,064 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,068 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,108 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,121 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,123 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,129 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,146 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,148 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,151 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,206 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,214 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,230 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,254 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,258 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,260 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:24,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:25,081 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-10-15 20:15:25,082 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-10-15 20:15:25,085 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,085 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,093 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,100 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,101 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,114 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-10-15 20:15:25,135 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,135 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,173 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,173 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,173 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,174 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,175 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-10-15 20:15:25,176 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,177 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,187 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,187 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,214 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,214 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,215 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,219 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,224 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-10-15 20:15:25,239 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,240 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,264 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,264 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,304 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,304 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,304 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,324 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,388 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-10-15 20:15:25,389 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,389 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,412 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,412 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,450 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,451 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,451 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,452 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,453 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-10-15 20:15:25,466 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,466 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,485 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,485 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~13=0} Honda state: {ULTIMATE.start_cleanup_~tmp~13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,508 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,510 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,511 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,519 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,520 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-10-15 20:15:25,525 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,525 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,552 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,553 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,601 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,602 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,602 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,604 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,610 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,611 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,626 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-10-15 20:15:25,640 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,640 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret126=0} Honda state: {ULTIMATE.start_timeShift_#t~ret126=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,674 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,674 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,674 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,678 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,681 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-10-15 20:15:25,682 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,682 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,698 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,698 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,721 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,722 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,722 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,723 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,724 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-10-15 20:15:25,725 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,725 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,735 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,735 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret123=0} Honda state: {ULTIMATE.start_timeShift_#t~ret123=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,758 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,758 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,758 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,761 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,765 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-10-15 20:15:25,766 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,766 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,776 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,777 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret101=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret101=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,803 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,803 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,804 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,805 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,806 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-10-15 20:15:25,807 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,807 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,832 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,832 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=-4, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~23=-4, ULTIMATE.start_isFloorCalling_#res=-4, ULTIMATE.start_isFloorCalling_~retValue_acc~25=-4, ~calls_0~0=-4, ULTIMATE.start_isExecutiveFloorCalling_#res=-4, ULTIMATE.start_stopRequestedInDirection_~tmp___0~8=-4, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23=-4} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=-4, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~23=-4, ULTIMATE.start_isFloorCalling_#res=-4, ULTIMATE.start_isFloorCalling_~retValue_acc~25=-4, ~calls_0~0=-4, ULTIMATE.start_isExecutiveFloorCalling_#res=-4, ULTIMATE.start_stopRequestedInDirection_~tmp___0~8=-4, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23=-4} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,857 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,857 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,857 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,858 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,859 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-10-15 20:15:25,860 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:25,861 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:25,874 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:25,874 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=1} Honda state: {~expectedDirection~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:25,897 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:25,898 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:25,898 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:25,904 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:25,905 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2021-10-15 20:15:26,022 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:26,023 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:26,045 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:26,045 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:26,068 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:26,068 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:26,068 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:26,069 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:26,069 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2021-10-15 20:15:26,070 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:26,070 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:26,078 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:26,079 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:26,104 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Ended with exit code 0 [2021-10-15 20:15:26,105 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:26,105 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:26,105 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:26,108 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2021-10-15 20:15:26,108 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:26,108 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:26,116 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:26,116 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret125=0} Honda state: {ULTIMATE.start_timeShift_#t~ret125=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:26,138 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:26,138 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:26,138 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:26,139 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:26,141 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2021-10-15 20:15:26,142 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:26,142 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:26,150 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:26,150 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:26,173 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:26,173 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:26,173 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:26,174 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:26,175 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2021-10-15 20:15:26,178 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:26,178 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:26,186 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-15 20:15:26,186 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret82=0} Honda state: {ULTIMATE.start_isIdle_#t~ret82=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-15 20:15:26,207 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:26,207 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:26,207 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:26,208 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:26,210 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2021-10-15 20:15:26,210 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-15 20:15:26,210 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:26,241 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:26,241 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:26,241 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:26,242 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:26,247 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2021-10-15 20:15:26,248 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-10-15 20:15:26,248 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-15 20:15:26,971 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-10-15 20:15:26,974 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:26,974 INFO L210 LassoAnalysis]: Preferences: [2021-10-15 20:15:26,974 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-10-15 20:15:26,974 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-10-15 20:15:26,974 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-10-15 20:15:26,974 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-10-15 20:15:26,974 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:26,974 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-10-15 20:15:26,974 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-10-15 20:15:26,975 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration5_Loop [2021-10-15 20:15:26,975 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-10-15 20:15:26,975 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-10-15 20:15:26,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,007 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,015 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,028 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,053 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,057 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,062 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,064 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,067 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,071 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,080 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,091 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,134 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,142 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,146 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,148 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,150 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,154 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,202 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,208 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,220 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,226 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,240 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,259 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,269 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,274 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,277 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,300 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,303 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:27,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-15 20:15:28,245 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-10-15 20:15:28,260 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-10-15 20:15:28,262 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,265 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,266 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,276 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,287 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,287 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,288 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,288 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,288 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,290 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,291 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,292 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2021-10-15 20:15:28,304 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,344 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,347 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,348 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,352 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,356 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,367 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,367 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,367 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,367 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,368 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,368 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,368 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,370 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2021-10-15 20:15:28,387 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,429 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,432 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,433 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,434 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,438 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,449 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,449 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,450 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,450 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,450 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,451 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,451 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,453 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2021-10-15 20:15:28,463 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,506 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,506 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,507 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,509 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,512 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,523 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,523 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,523 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,523 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,523 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,524 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,524 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,526 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2021-10-15 20:15:28,535 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,580 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,580 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,580 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,581 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,584 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,595 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,595 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,595 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2021-10-15 20:15:28,595 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,596 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,596 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,597 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,597 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,611 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,653 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,653 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,653 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,654 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,657 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,668 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,668 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,668 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,668 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,668 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,669 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,669 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,670 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2021-10-15 20:15:28,671 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,697 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,697 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,697 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,699 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,700 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2021-10-15 20:15:28,701 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,709 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,709 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,710 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,710 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,710 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,710 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,710 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,711 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,734 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,735 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,735 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,736 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,737 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,743 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2021-10-15 20:15:28,746 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,746 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,746 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,746 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,746 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,747 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,747 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,760 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,799 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2021-10-15 20:15:28,799 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,799 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,800 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,808 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2021-10-15 20:15:28,809 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,817 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,817 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,817 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,817 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,817 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,818 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,818 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,819 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,841 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,841 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,841 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,842 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,843 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2021-10-15 20:15:28,843 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,851 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,851 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,852 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,852 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,852 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,852 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,852 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,853 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,874 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Ended with exit code 0 [2021-10-15 20:15:28,875 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,875 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,876 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,877 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2021-10-15 20:15:28,877 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,885 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,885 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,885 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,886 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,886 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,886 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,886 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,888 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,909 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Ended with exit code 0 [2021-10-15 20:15:28,909 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,910 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,911 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2021-10-15 20:15:28,911 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,919 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,919 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,919 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,919 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,919 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,920 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,920 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,933 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,954 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:28,955 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,955 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,955 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,962 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2021-10-15 20:15:28,962 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:28,971 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:28,971 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:28,971 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:28,971 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:28,971 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:28,972 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:28,973 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:28,974 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:28,995 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2021-10-15 20:15:28,995 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:28,995 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:28,996 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:28,996 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2021-10-15 20:15:28,997 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:29,005 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:29,005 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:29,005 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:29,005 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:29,005 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:29,005 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:29,005 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:29,006 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:29,027 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Ended with exit code 0 [2021-10-15 20:15:29,027 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:29,028 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:29,029 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:29,030 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2021-10-15 20:15:29,031 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:29,038 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:29,038 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:29,038 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:29,038 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:29,039 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:29,039 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:29,039 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:29,043 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-15 20:15:29,063 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2021-10-15 20:15:29,064 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:29,064 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:29,071 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:29,082 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2021-10-15 20:15:29,082 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-15 20:15:29,091 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-15 20:15:29,091 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-15 20:15:29,092 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-15 20:15:29,092 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-15 20:15:29,092 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-15 20:15:29,094 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-15 20:15:29,094 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-15 20:15:29,107 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-10-15 20:15:29,135 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2021-10-15 20:15:29,135 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-10-15 20:15:29,136 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-15 20:15:29,137 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 [2021-10-15 20:15:29,147 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-15 20:15:29,149 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-10-15 20:15:29,149 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-10-15 20:15:29,149 INFO L513 LassoAnalysis]: Proved termination. [2021-10-15 20:15:29,150 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2021-10-15 20:15:29,170 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2021-10-15 20:15:29,187 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:29,188 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-10-15 20:15:29,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-15 20:15:29,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:15:29,440 INFO L263 TraceCheckSpWp]: Trace formula consists of 1177 conjuncts, 2 conjunts are in the unsatisfiable core [2021-10-15 20:15:29,449 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-15 20:15:30,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-15 20:15:30,077 INFO L263 TraceCheckSpWp]: Trace formula consists of 193 conjuncts, 5 conjunts are in the unsatisfiable core [2021-10-15 20:15:30,080 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-15 20:15:30,527 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-15 20:15:30,533 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2021-10-15 20:15:30,535 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 47045 states and 87870 transitions. cyclomatic complexity: 40826 Second operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:15:31,052 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2021-10-15 20:15:31,662 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 47045 states and 87870 transitions. cyclomatic complexity: 40826. Second operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 58349 states and 108942 transitions. Complement of second has 8 states. [2021-10-15 20:15:31,663 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2021-10-15 20:15:31,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:15:31,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11458 transitions. [2021-10-15 20:15:31,682 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11458 transitions. Stem has 149 letters. Loop has 47 letters. [2021-10-15 20:15:31,687 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-15 20:15:31,687 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11458 transitions. Stem has 196 letters. Loop has 47 letters. [2021-10-15 20:15:31,692 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-15 20:15:31,692 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11458 transitions. Stem has 149 letters. Loop has 94 letters. [2021-10-15 20:15:31,693 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-15 20:15:31,693 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58349 states and 108942 transitions. [2021-10-15 20:15:32,400 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-15 20:15:32,400 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58349 states to 0 states and 0 transitions. [2021-10-15 20:15:32,401 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2021-10-15 20:15:32,401 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2021-10-15 20:15:32,401 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2021-10-15 20:15:32,401 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-15 20:15:32,401 INFO L681 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-15 20:15:32,401 INFO L704 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-15 20:15:32,402 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-15 20:15:32,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-15 20:15:32,403 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-15 20:15:32,403 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand has 4 states, 4 states have (on average 37.25) internal successors, (149), 4 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-15 20:15:32,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-15 20:15:32,403 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2021-10-15 20:15:32,403 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-15 20:15:32,404 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2021-10-15 20:15:32,404 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-15 20:15:32,404 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2021-10-15 20:15:32,404 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2021-10-15 20:15:32,404 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2021-10-15 20:15:32,404 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2021-10-15 20:15:32,405 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-15 20:15:32,405 INFO L681 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-15 20:15:32,405 INFO L704 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-15 20:15:32,405 INFO L587 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-15 20:15:32,405 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-10-15 20:15:32,405 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2021-10-15 20:15:32,406 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-15 20:15:32,406 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2021-10-15 20:15:32,412 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 15.10 08:15:32 BoogieIcfgContainer [2021-10-15 20:15:32,412 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2021-10-15 20:15:32,413 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-15 20:15:32,413 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-15 20:15:32,413 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-15 20:15:32,414 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 08:14:39" (3/4) ... [2021-10-15 20:15:32,417 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-10-15 20:15:32,417 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-15 20:15:32,419 INFO L168 Benchmark]: Toolchain (without parser) took 65946.34 ms. Allocated memory was 88.1 MB in the beginning and 6.0 GB in the end (delta: 6.0 GB). Free memory was 51.0 MB in the beginning and 4.9 GB in the end (delta: -4.9 GB). Peak memory consumption was 1.1 GB. Max. memory is 16.1 GB. [2021-10-15 20:15:32,420 INFO L168 Benchmark]: CDTParser took 0.27 ms. Allocated memory is still 88.1 MB. Free memory was 57.9 MB in the beginning and 57.9 MB in the end (delta: 29.7 kB). There was no memory consumed. Max. memory is 16.1 GB. [2021-10-15 20:15:32,421 INFO L168 Benchmark]: CACSL2BoogieTranslator took 996.63 ms. Allocated memory was 88.1 MB in the beginning and 107.0 MB in the end (delta: 18.9 MB). Free memory was 50.8 MB in the beginning and 54.3 MB in the end (delta: -3.5 MB). Peak memory consumption was 15.1 MB. Max. memory is 16.1 GB. [2021-10-15 20:15:32,421 INFO L168 Benchmark]: Boogie Procedure Inliner took 413.00 ms. Allocated memory is still 107.0 MB. Free memory was 54.3 MB in the beginning and 57.2 MB in the end (delta: -2.9 MB). Peak memory consumption was 42.1 MB. Max. memory is 16.1 GB. [2021-10-15 20:15:32,426 INFO L168 Benchmark]: Boogie Preprocessor took 760.51 ms. Allocated memory was 107.0 MB in the beginning and 195.0 MB in the end (delta: 88.1 MB). Free memory was 57.2 MB in the beginning and 103.2 MB in the end (delta: -46.0 MB). Peak memory consumption was 43.2 MB. Max. memory is 16.1 GB. [2021-10-15 20:15:32,426 INFO L168 Benchmark]: RCFGBuilder took 11139.85 ms. Allocated memory was 195.0 MB in the beginning and 780.1 MB in the end (delta: 585.1 MB). Free memory was 102.5 MB in the beginning and 579.9 MB in the end (delta: -477.5 MB). Peak memory consumption was 186.0 MB. Max. memory is 16.1 GB. [2021-10-15 20:15:32,427 INFO L168 Benchmark]: BuchiAutomizer took 52623.02 ms. Allocated memory was 780.1 MB in the beginning and 6.0 GB in the end (delta: 5.3 GB). Free memory was 579.9 MB in the beginning and 4.9 GB in the end (delta: -4.4 GB). Peak memory consumption was 909.9 MB. Max. memory is 16.1 GB. [2021-10-15 20:15:32,427 INFO L168 Benchmark]: Witness Printer took 4.64 ms. Allocated memory is still 6.0 GB. Free memory is still 4.9 GB. There was no memory consumed. Max. memory is 16.1 GB. [2021-10-15 20:15:32,431 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27 ms. Allocated memory is still 88.1 MB. Free memory was 57.9 MB in the beginning and 57.9 MB in the end (delta: 29.7 kB). There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 996.63 ms. Allocated memory was 88.1 MB in the beginning and 107.0 MB in the end (delta: 18.9 MB). Free memory was 50.8 MB in the beginning and 54.3 MB in the end (delta: -3.5 MB). Peak memory consumption was 15.1 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 413.00 ms. Allocated memory is still 107.0 MB. Free memory was 54.3 MB in the beginning and 57.2 MB in the end (delta: -2.9 MB). Peak memory consumption was 42.1 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 760.51 ms. Allocated memory was 107.0 MB in the beginning and 195.0 MB in the end (delta: 88.1 MB). Free memory was 57.2 MB in the beginning and 103.2 MB in the end (delta: -46.0 MB). Peak memory consumption was 43.2 MB. Max. memory is 16.1 GB. * RCFGBuilder took 11139.85 ms. Allocated memory was 195.0 MB in the beginning and 780.1 MB in the end (delta: 585.1 MB). Free memory was 102.5 MB in the beginning and 579.9 MB in the end (delta: -477.5 MB). Peak memory consumption was 186.0 MB. Max. memory is 16.1 GB. * BuchiAutomizer took 52623.02 ms. Allocated memory was 780.1 MB in the beginning and 6.0 GB in the end (delta: 5.3 GB). Free memory was 579.9 MB in the beginning and 4.9 GB in the end (delta: -4.4 GB). Peak memory consumption was 909.9 MB. Max. memory is 16.1 GB. * Witness Printer took 4.64 ms. Allocated memory is still 6.0 GB. Free memory is still 4.9 GB. There was no memory consumed. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function -1 * i + cleanupTimeShifts and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 13 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 52.5s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 9.8s. Construction of modules took 20.6s. Büchi inclusion checks took 13.0s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 4123.3ms AutomataMinimizationTime, 4 MinimizatonAttempts, 48739 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 3.3s Buchi closure took 0.1s. Biggest automaton had 47045 states and ocurred in iteration 4. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 93349 SDtfs, 238642 SDslu, 266871 SDs, 0 SdLazy, 30170 SolverSat, 1924 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 20617.3ms Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital211 mio100 ax100 hnf100 lsp16 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq211 hnf87 smp100 dnf152 smp100 tf102 neg97 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 42ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 17 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.3s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! [2021-10-15 20:15:32,501 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6023a1aa-a873-4a29-a6af-6323096394d6/bin/uautomizer-hJ6jxDFKc3/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...