./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version e943c265 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 79cd0e89b784c92aef5addf1ffd5f426704de99d9c0060c88cf4cdcbae792c3b .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-e943c26 [2021-10-21 20:18:54,315 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-21 20:18:54,317 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-21 20:18:54,369 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-21 20:18:54,370 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-21 20:18:54,375 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-21 20:18:54,378 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-21 20:18:54,384 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-21 20:18:54,387 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-21 20:18:54,395 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-21 20:18:54,396 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-21 20:18:54,397 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-21 20:18:54,397 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-21 20:18:54,399 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-21 20:18:54,400 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-21 20:18:54,402 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-21 20:18:54,403 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-21 20:18:54,404 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-21 20:18:54,407 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-21 20:18:54,409 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-21 20:18:54,411 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-21 20:18:54,413 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-21 20:18:54,415 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-21 20:18:54,416 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-21 20:18:54,420 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-21 20:18:54,420 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-21 20:18:54,421 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-21 20:18:54,422 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-21 20:18:54,423 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-21 20:18:54,424 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-21 20:18:54,424 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-21 20:18:54,425 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-21 20:18:54,426 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-21 20:18:54,427 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-21 20:18:54,429 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-21 20:18:54,429 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-21 20:18:54,430 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-21 20:18:54,431 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-21 20:18:54,431 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-21 20:18:54,433 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-21 20:18:54,433 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-21 20:18:54,435 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-10-21 20:18:54,462 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-21 20:18:54,463 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-21 20:18:54,463 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-21 20:18:54,464 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-21 20:18:54,465 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-21 20:18:54,466 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-21 20:18:54,466 INFO L138 SettingsManager]: * Use SBE=true [2021-10-21 20:18:54,466 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-10-21 20:18:54,467 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-10-21 20:18:54,467 INFO L138 SettingsManager]: * Use old map elimination=false [2021-10-21 20:18:54,468 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-10-21 20:18:54,468 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-10-21 20:18:54,468 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-10-21 20:18:54,469 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-21 20:18:54,469 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-21 20:18:54,470 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-10-21 20:18:54,470 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-21 20:18:54,470 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-21 20:18:54,471 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-21 20:18:54,471 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-10-21 20:18:54,472 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-10-21 20:18:54,472 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-10-21 20:18:54,472 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-21 20:18:54,473 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-21 20:18:54,473 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-10-21 20:18:54,473 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-21 20:18:54,473 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-10-21 20:18:54,474 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-21 20:18:54,474 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-21 20:18:54,474 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-21 20:18:54,474 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-21 20:18:54,475 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-21 20:18:54,476 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-10-21 20:18:54,476 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79cd0e89b784c92aef5addf1ffd5f426704de99d9c0060c88cf4cdcbae792c3b [2021-10-21 20:18:54,759 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-21 20:18:54,792 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-21 20:18:54,796 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-21 20:18:54,797 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-21 20:18:54,799 INFO L275 PluginConnector]: CDTParser initialized [2021-10-21 20:18:54,800 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2021-10-21 20:18:54,911 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/data/3f506a7f3/1eca15e158314f09b8cbf6a75e0c625f/FLAG79be63b9e [2021-10-21 20:18:55,531 INFO L306 CDTParser]: Found 1 translation units. [2021-10-21 20:18:55,532 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2021-10-21 20:18:55,569 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/data/3f506a7f3/1eca15e158314f09b8cbf6a75e0c625f/FLAG79be63b9e [2021-10-21 20:18:55,739 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/data/3f506a7f3/1eca15e158314f09b8cbf6a75e0c625f [2021-10-21 20:18:55,741 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-21 20:18:55,742 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-21 20:18:55,748 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-21 20:18:55,748 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-21 20:18:55,751 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-21 20:18:55,751 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.10 08:18:55" (1/1) ... [2021-10-21 20:18:55,752 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@dd2f52c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:55, skipping insertion in model container [2021-10-21 20:18:55,752 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.10 08:18:55" (1/1) ... [2021-10-21 20:18:55,760 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-21 20:18:55,842 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-21 20:18:56,036 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c[1545,1558] [2021-10-21 20:18:56,438 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-21 20:18:56,449 INFO L203 MainTranslator]: Completed pre-run [2021-10-21 20:18:56,462 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c[1545,1558] [2021-10-21 20:18:56,590 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-21 20:18:56,645 INFO L208 MainTranslator]: Completed translation [2021-10-21 20:18:56,646 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56 WrapperNode [2021-10-21 20:18:56,646 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-21 20:18:56,647 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-21 20:18:56,647 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-21 20:18:56,648 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-21 20:18:56,654 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:56,684 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,023 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-21 20:18:57,024 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-21 20:18:57,024 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-21 20:18:57,024 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-21 20:18:57,033 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,034 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,080 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,081 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,346 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,508 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,535 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,648 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-21 20:18:57,649 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-21 20:18:57,649 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-21 20:18:57,649 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-21 20:18:57,654 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (1/1) ... [2021-10-21 20:18:57,670 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:18:57,695 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:18:57,732 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:18:57,739 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-10-21 20:18:57,783 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-21 20:18:57,783 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-21 20:18:57,783 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-21 20:18:57,783 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-21 20:19:06,733 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-21 20:19:06,733 INFO L299 CfgBuilder]: Removed 1377 assume(true) statements. [2021-10-21 20:19:06,743 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.10 08:19:06 BoogieIcfgContainer [2021-10-21 20:19:06,743 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-21 20:19:06,745 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-10-21 20:19:06,745 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-10-21 20:19:06,749 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-10-21 20:19:06,749 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-21 20:19:06,750 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 21.10 08:18:55" (1/3) ... [2021-10-21 20:19:06,752 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6472b832 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.10 08:19:06, skipping insertion in model container [2021-10-21 20:19:06,752 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-21 20:19:06,752 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:18:56" (2/3) ... [2021-10-21 20:19:06,752 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6472b832 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.10 08:19:06, skipping insertion in model container [2021-10-21 20:19:06,753 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-21 20:19:06,753 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.10 08:19:06" (3/3) ... [2021-10-21 20:19:06,754 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product11.cil.c [2021-10-21 20:19:06,817 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-10-21 20:19:06,817 INFO L360 BuchiCegarLoop]: Hoare is false [2021-10-21 20:19:06,818 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-10-21 20:19:06,818 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-10-21 20:19:06,818 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-10-21 20:19:06,818 INFO L364 BuchiCegarLoop]: Difference is false [2021-10-21 20:19:06,818 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-10-21 20:19:06,818 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-10-21 20:19:06,938 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6083 states, 6082 states have (on average 1.8900032883919764) internal successors, (11495), 6082 states have internal predecessors, (11495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:07,095 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1234 [2021-10-21 20:19:07,095 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-21 20:19:07,095 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-21 20:19:07,125 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:07,126 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:07,126 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-10-21 20:19:07,146 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6083 states, 6082 states have (on average 1.8900032883919764) internal successors, (11495), 6082 states have internal predecessors, (11495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:07,231 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1234 [2021-10-21 20:19:07,232 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-21 20:19:07,232 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-21 20:19:07,249 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:07,249 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:07,266 INFO L791 eck$LassoCheckResult]: Stem: 3717#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5961#L-1true havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 2140#L3410true havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 913#L3418true main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 4836#L1172true assume 0 != main_~tmp~15; 6072#L1145true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3180#L2802true havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 4775#L569true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 4471#L594true bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 856#L3080true assume 0 == initPersonOnFloor_~floor; 3772#L3081true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2912#L3188-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1421#L2872true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4349#L2884-2true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4784#L1428true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 3602#L1480true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 5214#L670true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2052#L671true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 2953#L1445true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 5608#L1466true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 87#L675true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 2630#L776true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 482#L2809true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 4860#L2836true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 2000#L2713true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 4762#L2097true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5083#L1428-1true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 4472#L2101true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1571#L2114true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 127#L2250true assume !(0 != timeShift_~tmp___9~3); 2762#L2341true assume !(1 == ~doorState~0); 221#L2341-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1446#L2809-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 16#L2836-3true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 5287#L2713-1true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 4449#L1980true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 3048#L1428-2true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 3836#L1993true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 107#L2349true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2706#L2037true assume !(1 == ~currentHeading~0); 480#L2047true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 804#L2047-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6067#L2053-5true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1068#L801true assume !(-1 == ~expectedDirection~0); 3001#L813true assume !(1 == ~expectedDirection~0); 1249#L814true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4178#L1428-4true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 3958#L1480-3true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1238#L670-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 4165#L671-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1839#L1445-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1987#L1466-12true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 4974#L675-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4738#L776-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 4158#L2809-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 3045#L2836-25true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 4146#L2713-3true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 976#L2097-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1824#L1428-5true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 116#L2101-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 5263#L2114-1true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 5503#L2250-1true assume !(0 != timeShift_~tmp___9~3); 4066#L2341-3true assume !(1 == ~doorState~0); 2227#L2341-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 2467#L2809-28true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 3411#L2836-28true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 5946#L2713-4true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 4106#L1980-2true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5633#L1428-6true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 5648#L1993-2true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 4812#L2349-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5705#L2037-3true assume !(1 == ~currentHeading~0); 5756#L2047-9true assume !(0 == ~currentFloorID~0); 2466#L2047-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4232#L2053-11true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 618#L801-1true assume !(-1 == ~expectedDirection~0); 5935#L813-1true assume !(1 == ~expectedDirection~0); 5635#L814-1true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4317#L1428-8true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 4404#L1480-6true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 4939#L670-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1066#L732-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 3316#L1445-29true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 3727#L1466-29true __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 2192#L736-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1891#L776-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 3882#L2809-50true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5168#L2836-50true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 1790#L2713-6true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 5727#L2097-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 926#L1428-9true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 2586#L2101-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3035#L2114-2true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 2512#L2250-2true assume !(0 != timeShift_~tmp___9~3); 2293#L2341-6true assume !(1 == ~doorState~0); 4960#L2341-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 2932#L2809-53true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5473#L2836-53true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 3637#L2713-7true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 3864#L1980-4true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1261#L1428-10true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 5821#L1993-4true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 5244#L2349-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5406#L2037-6true assume !(1 == ~currentHeading~0); 4271#L2047-18true assume !(0 == ~currentFloorID~0); 3883#L2047-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4149#L2053-17true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3649#L801-2true assume !(-1 == ~expectedDirection~0); 3950#L813-2true assume !(1 == ~expectedDirection~0); 4548#L814-2true havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1097#L569-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 441#L594-1true bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1823#L3080-1true assume 0 == initPersonOnFloor_~floor; 5768#L3081-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1738#L3188-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5836#L2872-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 492#L2884-5true havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4635#L1428-12true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 1343#L1480-9true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 4608#L670-3true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3541#L732-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1335#L1445-41true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1216#L1466-41true __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 3959#L736-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 5543#L776-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 5581#L2809-75true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 74#L2836-75true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 848#L2713-9true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 5850#L2097-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4398#L1428-13true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 5586#L2101-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 5033#L2114-3true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 3207#L2250-3true assume !(0 != timeShift_~tmp___9~3); 1397#L2341-9true assume !(1 == ~doorState~0); 3183#L2341-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 2568#L2809-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 3703#L2836-78true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 2103#L2713-10true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 2787#L1980-6true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 233#L1428-14true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 2341#L1993-6true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 351#L2349-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 393#L2037-9true assume !(1 == ~currentHeading~0); 3617#L2047-27true assume !(0 == ~currentFloorID~0); 1773#L2047-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1279#L2053-23true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1098#L801-3true assume !(-1 == ~expectedDirection~0); 5046#L813-3true assume !(1 == ~expectedDirection~0); 1588#L814-3true cleanup_~i~2 := 0; 2400#L977-2true [2021-10-21 20:19:07,274 INFO L793 eck$LassoCheckResult]: Loop: 2400#L977-2true assume !false; 3742#L978true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3147#L981true assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 5985#L1279true cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 4151#L985true assume 1 != cleanup_~tmp___0~4; 5308#L985-1true havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 3992#L2809-100true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 3513#L2836-100true anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 4941#L1536true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 5248#L1600true isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 3294#L1613true cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 2184#L997true assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5242#L1428-16true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 2062#L1480-12true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2045#L670-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2101#L671-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 3681#L1445-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1799#L1466-48true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 3403#L675-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4163#L776-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 2028#L2809-105true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 1230#L2836-105true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 5100#L2713-12true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 2952#L2097-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5461#L1428-17true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 5013#L2101-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4278#L2114-4true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 1186#L2250-4true assume !(0 != timeShift_~tmp___9~3); 1745#L2341-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4693#L2341-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1820#L2809-108true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 1135#L2836-108true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 1046#L2713-13true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 1892#L1980-8true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 2530#L1428-18true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 2798#L1993-8true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 1290#L2349-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2849#L2037-12true assume !(1 == ~currentHeading~0); 2964#L2047-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1766#L2047-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3581#L2053-29true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3492#L801-4true assume !(-1 == ~expectedDirection~0); 5472#L813-4true assume !(1 == ~expectedDirection~0); 3090#L814-4true cleanup_~i~2 := 1 + cleanup_~i~2; 2400#L977-2true [2021-10-21 20:19:07,282 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:07,282 INFO L82 PathProgramCache]: Analyzing trace with hash -1728832092, now seen corresponding path program 1 times [2021-10-21 20:19:07,290 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:07,290 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184602778] [2021-10-21 20:19:07,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:07,292 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:07,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:07,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:07,839 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:07,839 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184602778] [2021-10-21 20:19:07,841 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184602778] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:07,841 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:07,841 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:19:07,847 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248899102] [2021-10-21 20:19:07,865 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-21 20:19:07,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:07,870 INFO L82 PathProgramCache]: Analyzing trace with hash -2080652541, now seen corresponding path program 1 times [2021-10-21 20:19:07,871 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:07,873 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1125476354] [2021-10-21 20:19:07,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:07,874 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:07,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:07,964 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:07,965 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:07,966 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1125476354] [2021-10-21 20:19:07,966 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1125476354] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:07,967 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:07,967 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-21 20:19:07,967 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011571319] [2021-10-21 20:19:07,968 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-21 20:19:07,969 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:19:07,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-21 20:19:07,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:19:08,003 INFO L87 Difference]: Start difference. First operand has 6083 states, 6082 states have (on average 1.8900032883919764) internal successors, (11495), 6082 states have internal predecessors, (11495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:09,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:19:09,556 INFO L93 Difference]: Finished difference Result 12213 states and 22923 transitions. [2021-10-21 20:19:09,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-21 20:19:09,559 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 12213 states and 22923 transitions. [2021-10-21 20:19:09,663 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2596 [2021-10-21 20:19:09,786 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 12213 states to 12149 states and 22846 transitions. [2021-10-21 20:19:09,787 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12149 [2021-10-21 20:19:09,806 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12149 [2021-10-21 20:19:09,807 INFO L73 IsDeterministic]: Start isDeterministic. Operand 12149 states and 22846 transitions. [2021-10-21 20:19:09,840 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-21 20:19:09,841 INFO L681 BuchiCegarLoop]: Abstraction has 12149 states and 22846 transitions. [2021-10-21 20:19:09,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12149 states and 22846 transitions. [2021-10-21 20:19:10,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12149 to 11619. [2021-10-21 20:19:10,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11619 states, 11619 states have (on average 1.8888888888888888) internal successors, (21947), 11618 states have internal predecessors, (21947), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:10,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11619 states to 11619 states and 21947 transitions. [2021-10-21 20:19:10,197 INFO L704 BuchiCegarLoop]: Abstraction has 11619 states and 21947 transitions. [2021-10-21 20:19:10,197 INFO L587 BuchiCegarLoop]: Abstraction has 11619 states and 21947 transitions. [2021-10-21 20:19:10,198 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-10-21 20:19:10,198 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11619 states and 21947 transitions. [2021-10-21 20:19:10,366 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2372 [2021-10-21 20:19:10,366 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-21 20:19:10,366 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-21 20:19:10,372 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:10,372 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:10,373 INFO L791 eck$LassoCheckResult]: Stem: 23749#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 23750#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 22175#L3410 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 20306#L3418 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 20307#L1172 assume 0 != main_~tmp~15; 24422#L1145 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 23306#L2802 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 23307#L569 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 20292#L594 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 20194#L3080 assume 0 == initPersonOnFloor_~floor; 20195#L3081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 18330#L3188-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 21160#L2872 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19203#L2884-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24175#L1428 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 23661#L1480 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 23662#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 23301#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 21923#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19147#L1466-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 20660#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 18818#L776 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 26192#L2809 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 26188#L2836 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 26183#L2713 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 26180#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 26176#L1428-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 26174#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26171#L2114 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 26170#L2250 assume !(0 != timeShift_~tmp___9~3); 26169#L2341 assume !(1 == ~doorState~0); 26168#L2341-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 26161#L2809-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 26156#L2836-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 26155#L2713-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 26154#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 26085#L1428-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 26083#L1993 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 26081#L2349 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 26082#L2037 assume !(1 == ~currentHeading~0); 19461#L2047 assume !(0 == ~currentFloorID~0); 19462#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26424#L2053-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 26422#L801 assume !(-1 == ~expectedDirection~0); 26419#L813 assume !(1 == ~expectedDirection~0); 20887#L814 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 20888#L1428-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 26312#L1480-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 26311#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 23674#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 20703#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19478#L1466-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 21105#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 20762#L776-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25236#L2809-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25176#L2836-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25171#L2713-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 25157#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25150#L1428-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 25143#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 25141#L2114-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 25140#L2250-1 assume !(0 != timeShift_~tmp___9~3); 25002#L2341-3 assume !(1 == ~doorState~0); 24937#L2341-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 24876#L2809-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 24873#L2836-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 24871#L2713-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 24824#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24822#L1428-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 24821#L1993-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 24819#L2349-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 24818#L2037-3 assume !(1 == ~currentHeading~0); 24762#L2047-9 assume !(0 == ~currentFloorID~0); 19650#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23268#L2053-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 19747#L801-1 assume !(-1 == ~expectedDirection~0); 19748#L813-1 assume !(1 == ~expectedDirection~0); 23124#L814-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24727#L1428-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 25504#L1480-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 24813#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 20575#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 20576#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19511#L1466-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 22239#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 20037#L776-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25906#L2809-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25901#L2836-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25900#L2713-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 25882#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25872#L1428-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 25652#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 25649#L2114-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 25647#L2250-2 assume !(0 != timeShift_~tmp___9~3); 25644#L2341-6 assume !(1 == ~doorState~0); 25642#L2341-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25530#L2809-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25520#L2836-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25518#L2713-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 25515#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25511#L1428-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 25508#L1993-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 25505#L2349-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 24814#L2037-6 assume !(1 == ~currentHeading~0); 24115#L2047-18 assume !(0 == ~currentFloorID~0); 22468#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27847#L2053-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 27845#L801-2 assume !(-1 == ~expectedDirection~0); 27842#L813-2 assume !(1 == ~expectedDirection~0); 27840#L814-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 27837#L569-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 27833#L594-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 27832#L3080-1 assume 0 == initPersonOnFloor_~floor; 27797#L3081-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21632#L3188-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 21633#L2872-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19484#L2884-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 19485#L1428-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 25961#L1480-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 25959#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 23610#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 21015#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19446#L1466-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 20833#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 19900#L776-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25429#L2809-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25420#L2836-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25418#L2713-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 25356#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25345#L1428-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 25322#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 25321#L2114-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 25319#L2250-3 assume !(0 != timeShift_~tmp___9~3); 25318#L2341-9 assume !(1 == ~doorState~0); 25317#L2341-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 25316#L2809-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 25311#L2836-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25310#L2713-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 25308#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25306#L1428-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 25285#L1993-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 25280#L2349-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 25281#L2037-9 assume !(1 == ~currentHeading~0); 23675#L2047-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 20340#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21676#L2053-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 29232#L801-3 assume !(-1 == ~expectedDirection~0); 29229#L813-3 assume !(1 == ~expectedDirection~0); 28553#L814-3 cleanup_~i~2 := 0; 28552#L977-2 [2021-10-21 20:19:10,374 INFO L793 eck$LassoCheckResult]: Loop: 28552#L977-2 assume !false; 28551#L978 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 28550#L981 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 28549#L1279 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 28548#L985 assume 1 != cleanup_~tmp___0~4; 28547#L985-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 28546#L2809-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 23585#L2836-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 23586#L1536 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 27782#L1600 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 26412#L1613 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 26340#L997 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24612#L1428-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 22091#L1480-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 22063#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 22064#L671-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 22132#L1445-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 21095#L1466-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 21713#L675-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 23497#L776-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 22035#L2809-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 20850#L2836-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 20851#L2713-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 23097#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 23098#L1428-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 24509#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 19004#L2114-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 20786#L2250-4 assume !(0 != timeShift_~tmp___9~3); 20787#L2341-12 assume 1 == ~doorState~0;~doorState~0 := 0; 21640#L2341-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 21737#L2809-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 19416#L2836-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 20539#L2713-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 20540#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 21847#L1428-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 22639#L1993-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 20950#L2349-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 20951#L2037-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 22983#L3383-21 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 21692#L2041-36 assume !(0 != continueInDirection_~tmp~21); 21664#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 19056#L2053-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 28558#L801-4 assume !(-1 == ~expectedDirection~0); 28555#L813-4 assume !(1 == ~expectedDirection~0); 28554#L814-4 cleanup_~i~2 := 1 + cleanup_~i~2; 28552#L977-2 [2021-10-21 20:19:10,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:10,375 INFO L82 PathProgramCache]: Analyzing trace with hash -1092943826, now seen corresponding path program 1 times [2021-10-21 20:19:10,375 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:10,376 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796671796] [2021-10-21 20:19:10,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:10,376 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:10,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:10,482 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:10,482 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:10,482 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796671796] [2021-10-21 20:19:10,483 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796671796] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:10,483 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:10,483 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:19:10,483 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608741402] [2021-10-21 20:19:10,484 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-21 20:19:10,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:10,484 INFO L82 PathProgramCache]: Analyzing trace with hash 1785765021, now seen corresponding path program 1 times [2021-10-21 20:19:10,485 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:10,485 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [287388394] [2021-10-21 20:19:10,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:10,485 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:10,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:10,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:10,541 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:10,548 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [287388394] [2021-10-21 20:19:10,548 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [287388394] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:10,548 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:10,549 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:19:10,549 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890866157] [2021-10-21 20:19:10,550 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-21 20:19:10,551 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:19:10,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:19:10,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:19:10,553 INFO L87 Difference]: Start difference. First operand 11619 states and 21947 transitions. cyclomatic complexity: 10329 Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:11,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:19:11,064 INFO L93 Difference]: Finished difference Result 17320 states and 32695 transitions. [2021-10-21 20:19:11,064 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:19:11,065 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17320 states and 32695 transitions. [2021-10-21 20:19:11,197 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3571 [2021-10-21 20:19:11,329 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17320 states to 17320 states and 32695 transitions. [2021-10-21 20:19:11,329 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17320 [2021-10-21 20:19:11,355 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17320 [2021-10-21 20:19:11,355 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17320 states and 32695 transitions. [2021-10-21 20:19:11,383 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-21 20:19:11,383 INFO L681 BuchiCegarLoop]: Abstraction has 17320 states and 32695 transitions. [2021-10-21 20:19:11,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17320 states and 32695 transitions. [2021-10-21 20:19:11,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17320 to 17114. [2021-10-21 20:19:11,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17114 states, 17114 states have (on average 1.8889213509407503) internal successors, (32327), 17113 states have internal predecessors, (32327), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:12,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17114 states to 17114 states and 32327 transitions. [2021-10-21 20:19:12,035 INFO L704 BuchiCegarLoop]: Abstraction has 17114 states and 32327 transitions. [2021-10-21 20:19:12,035 INFO L587 BuchiCegarLoop]: Abstraction has 17114 states and 32327 transitions. [2021-10-21 20:19:12,035 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-10-21 20:19:12,035 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17114 states and 32327 transitions. [2021-10-21 20:19:12,115 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3471 [2021-10-21 20:19:12,115 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-21 20:19:12,115 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-21 20:19:12,122 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:12,122 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:12,122 INFO L791 eck$LassoCheckResult]: Stem: 52597#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 52598#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 51070#L3410 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 49245#L3418 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 49246#L1172 assume 0 != main_~tmp~15; 53205#L1145 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 52182#L2802 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 52183#L569 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 49229#L594 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 49132#L3080 assume 0 == initPersonOnFloor_~floor; 49133#L3081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 47280#L3188-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 50088#L2872 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 48149#L2884-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 52993#L1428 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 52518#L1480 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 52519#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 52178#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 50829#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 48091#L1466-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 49593#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 47763#L776 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 55123#L2809 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 55119#L2836 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 55118#L2713 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 55100#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 55095#L1428-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 55087#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 55084#L2114 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 55082#L2250 assume !(0 != timeShift_~tmp___9~3); 55081#L2341 assume !(1 == ~doorState~0); 55080#L2341-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 55078#L2809-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 55066#L2836-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 55065#L2713-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 54984#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54938#L1428-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 54937#L1993 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 54935#L2349 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 54936#L2037 assume !(1 == ~currentHeading~0); 48404#L2047 assume !(0 == ~currentFloorID~0); 48405#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55148#L2053-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 55145#L801 assume !(-1 == ~expectedDirection~0); 55142#L813 assume !(1 == ~expectedDirection~0); 55129#L814 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 55128#L1428-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 55127#L1480-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 55126#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 52531#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 49631#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 48424#L1466-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 50033#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 49691#L776-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54195#L2809-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54192#L2836-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54191#L2713-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 54182#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54179#L1428-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 54155#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 54144#L2114-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 54142#L2250-1 assume !(0 != timeShift_~tmp___9~3); 54132#L2341-3 assume !(1 == ~doorState~0); 54129#L2341-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 53629#L2809-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 53626#L2836-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 53624#L2713-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 53522#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 53520#L1428-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 53519#L1993-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 53517#L2349-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 53515#L2037-3 assume !(1 == ~currentHeading~0); 53476#L2047-9 assume !(0 == ~currentFloorID~0); 53478#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 56786#L2053-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 60494#L801-1 assume !(-1 == ~expectedDirection~0); 60495#L813-1 assume !(1 == ~expectedDirection~0); 52013#L814-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 52971#L1428-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 52972#L1480-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 53016#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 49509#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 49510#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 48455#L1466-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 51135#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 48977#L776-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54625#L2809-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54620#L2836-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54619#L2713-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 54617#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54618#L1428-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 54586#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 54585#L2114-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 54583#L2250-2 assume !(0 != timeShift_~tmp___9~3); 54582#L2341-6 assume !(1 == ~doorState~0); 54580#L2341-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54579#L2809-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54574#L2836-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54551#L2713-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 54546#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54391#L1428-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 54343#L1993-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 54257#L2349-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 53507#L2037-6 assume !(1 == ~currentHeading~0); 52944#L2047-18 assume !(0 == ~currentFloorID~0); 52946#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57260#L2053-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 57257#L801-2 assume !(-1 == ~expectedDirection~0); 57254#L813-2 assume !(1 == ~expectedDirection~0); 57252#L814-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 57238#L569-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 57233#L594-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 57230#L3080-1 assume 0 == initPersonOnFloor_~floor; 57169#L3081-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 55140#L3188-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 55139#L2872-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 54670#L2884-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54667#L1428-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 54665#L1480-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 54662#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 52468#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 49941#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 48388#L1466-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 49759#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 48841#L776-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54103#L2809-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54099#L2836-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54098#L2713-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 54096#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 54097#L1428-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 54046#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 54045#L2114-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 54044#L2250-3 assume !(0 != timeShift_~tmp___9~3); 54043#L2341-9 assume !(1 == ~doorState~0); 54042#L2341-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 54041#L2809-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 54031#L2836-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 54029#L2713-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 53963#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 53956#L1428-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 53954#L1993-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 53948#L2349-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 53949#L2037-9 assume !(1 == ~currentHeading~0); 52528#L2047-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 52529#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 59271#L2053-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 62198#L801-3 assume !(-1 == ~expectedDirection~0); 59717#L813-3 assume !(1 == ~expectedDirection~0); 59711#L814-3 cleanup_~i~2 := 0; 59710#L977-2 [2021-10-21 20:19:12,124 INFO L793 eck$LassoCheckResult]: Loop: 59710#L977-2 assume !false; 59709#L978 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 59708#L981 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 59707#L1279 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 59706#L985 assume 1 != cleanup_~tmp___0~4; 59705#L985-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 59704#L2809-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 59699#L2836-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 59688#L1536 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 59679#L1600 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 59678#L1613 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 51125#L997 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51126#L1428-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 50987#L1480-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 50962#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 50963#L671-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 51028#L681-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 51893#L692-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 48886#L703-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 48888#L714-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 52673#L776-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 59057#L2809-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 59056#L2836-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 59055#L2713-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 59049#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 59047#L1428-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 59041#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 59039#L2114-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 59037#L2250-4 assume !(0 != timeShift_~tmp___9~3); 59036#L2341-12 assume 1 == ~doorState~0;~doorState~0 := 0; 59035#L2341-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 59032#L2809-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 59027#L2836-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 59026#L2713-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 59024#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 58981#L1428-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 58980#L1993-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 58973#L2349-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 58971#L2037-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 53569#L3383-21 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 58970#L2041-36 assume !(0 != continueInDirection_~tmp~21); 51996#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58963#L2053-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 59728#L801-4 assume !(-1 == ~expectedDirection~0); 59713#L813-4 assume !(1 == ~expectedDirection~0); 59712#L814-4 cleanup_~i~2 := 1 + cleanup_~i~2; 59710#L977-2 [2021-10-21 20:19:12,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:12,125 INFO L82 PathProgramCache]: Analyzing trace with hash -1092943826, now seen corresponding path program 2 times [2021-10-21 20:19:12,125 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:12,125 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [235104960] [2021-10-21 20:19:12,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:12,125 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:12,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:12,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:12,203 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:12,203 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [235104960] [2021-10-21 20:19:12,203 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [235104960] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:12,203 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:12,204 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:19:12,204 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1559214644] [2021-10-21 20:19:12,204 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-21 20:19:12,205 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:12,205 INFO L82 PathProgramCache]: Analyzing trace with hash 1215428504, now seen corresponding path program 1 times [2021-10-21 20:19:12,205 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:12,205 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [431225771] [2021-10-21 20:19:12,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:12,206 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:12,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:12,576 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:12,576 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:12,576 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [431225771] [2021-10-21 20:19:12,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [431225771] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:12,577 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:12,577 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-10-21 20:19:12,577 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2145092303] [2021-10-21 20:19:12,578 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-21 20:19:12,578 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:19:12,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-10-21 20:19:12,579 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2021-10-21 20:19:12,579 INFO L87 Difference]: Start difference. First operand 17114 states and 32327 transitions. cyclomatic complexity: 15214 Second operand has 13 states, 13 states have (on average 3.5384615384615383) internal successors, (46), 13 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:34,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:19:34,492 INFO L93 Difference]: Finished difference Result 60897 states and 113165 transitions. [2021-10-21 20:19:34,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2021-10-21 20:19:34,493 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60897 states and 113165 transitions. [2021-10-21 20:19:34,794 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13621 [2021-10-21 20:19:35,047 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60897 states to 60897 states and 113165 transitions. [2021-10-21 20:19:35,047 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60897 [2021-10-21 20:19:35,130 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60897 [2021-10-21 20:19:35,130 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60897 states and 113165 transitions. [2021-10-21 20:19:35,193 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-21 20:19:35,193 INFO L681 BuchiCegarLoop]: Abstraction has 60897 states and 113165 transitions. [2021-10-21 20:19:35,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60897 states and 113165 transitions. [2021-10-21 20:19:35,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60897 to 38369. [2021-10-21 20:19:35,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38369 states, 38369 states have (on average 1.86348354140061) internal successors, (71500), 38368 states have internal predecessors, (71500), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:36,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38369 states to 38369 states and 71500 transitions. [2021-10-21 20:19:36,074 INFO L704 BuchiCegarLoop]: Abstraction has 38369 states and 71500 transitions. [2021-10-21 20:19:36,074 INFO L587 BuchiCegarLoop]: Abstraction has 38369 states and 71500 transitions. [2021-10-21 20:19:36,074 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-10-21 20:19:36,074 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38369 states and 71500 transitions. [2021-10-21 20:19:36,448 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8236 [2021-10-21 20:19:36,448 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-21 20:19:36,448 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-21 20:19:36,459 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:36,460 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:36,461 INFO L791 eck$LassoCheckResult]: Stem: 131196#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 131197#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 129398#L3410 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 127416#L3418 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 127417#L1172 assume 0 != main_~tmp~15; 132052#L1145 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 130681#L2802 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 130682#L569 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 127402#L594 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 127302#L3080 assume 0 == initPersonOnFloor_~floor; 127303#L3081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 125421#L3188-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 128303#L2872 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 126286#L2884-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 131732#L1428 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 131094#L1480 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 131095#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 130674#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 129118#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 126230#L1466-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 127779#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 125901#L776 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 134243#L2809 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 134239#L2836 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 134238#L2713 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 134220#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 134215#L1428-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 134207#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 134204#L2114 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 134202#L2250 assume !(0 != timeShift_~tmp___9~3); 134201#L2341 assume !(1 == ~doorState~0); 134200#L2341-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 134119#L2809-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 134114#L2836-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 134112#L2713-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 134065#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 134061#L1428-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 134060#L1993 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 134058#L2349 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 134059#L2037 assume !(1 == ~currentHeading~0); 126556#L2047 assume !(0 == ~currentFloorID~0); 126557#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134286#L2053-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 134269#L801 assume !(-1 == ~expectedDirection~0); 134257#L813 assume !(1 == ~expectedDirection~0); 134250#L814 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 134249#L1428-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 134248#L1480-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 134245#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 131111#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 127821#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 126573#L1466-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 128247#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 127880#L776-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133577#L2809-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133573#L2836-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133572#L2713-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 133566#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133564#L1428-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 133558#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 133554#L2114-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 133552#L2250-1 assume !(0 != timeShift_~tmp___9~3); 133496#L2341-3 assume !(1 == ~doorState~0); 133493#L2341-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133480#L2809-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133468#L2836-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 132839#L2713-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 132651#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 132645#L1428-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 132642#L1993-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 132637#L2349-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 132634#L2037-3 assume !(1 == ~currentHeading~0); 132514#L2047-9 assume !(0 == ~currentFloorID~0); 126747#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134301#L2053-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 134273#L801-1 assume !(-1 == ~expectedDirection~0); 134266#L813-1 assume !(1 == ~expectedDirection~0); 133779#L814-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133774#L1428-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 133773#L1480-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 132624#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 127693#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 127694#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 126608#L1466-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 129473#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 127142#L776-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133751#L2809-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133746#L2836-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133729#L2713-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 133723#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133701#L1428-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 133692#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 133687#L2114-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 133685#L2250-2 assume !(0 != timeShift_~tmp___9~3); 133684#L2341-6 assume !(1 == ~doorState~0); 133679#L2341-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133586#L2809-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133580#L2836-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133574#L2713-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 133497#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133494#L1428-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 133492#L1993-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 133491#L2349-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 132626#L2037-6 assume !(1 == ~currentHeading~0); 131670#L2047-18 assume !(0 == ~currentFloorID~0); 129719#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 136716#L2053-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 136697#L801-2 assume !(-1 == ~expectedDirection~0); 136689#L813-2 assume !(1 == ~expectedDirection~0); 136672#L814-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 135912#L569-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 135908#L594-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 135906#L3080-1 assume 0 == initPersonOnFloor_~floor; 135076#L3081-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 134272#L3188-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 134264#L2872-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 134115#L2884-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 134113#L1428-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 134111#L1480-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 134063#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 131041#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 128154#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 126541#L1466-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 127954#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 127003#L776-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133258#L2809-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133254#L2836-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133253#L2713-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 133251#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133252#L1428-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 133220#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 133219#L2114-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 133217#L2250-3 assume !(0 != timeShift_~tmp___9~3); 133216#L2341-9 assume !(1 == ~doorState~0); 133214#L2341-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133213#L2809-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 133207#L2836-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133206#L2713-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 133205#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133126#L1428-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 133125#L1993-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 133123#L2349-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 133124#L2037-9 assume !(1 == ~currentHeading~0); 131112#L2047-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 131113#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 135150#L2053-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 159221#L801-3 assume !(-1 == ~expectedDirection~0); 159218#L813-3 assume !(1 == ~expectedDirection~0); 159212#L814-3 cleanup_~i~2 := 0; 159211#L977-2 [2021-10-21 20:19:36,461 INFO L793 eck$LassoCheckResult]: Loop: 159211#L977-2 assume !false; 159210#L978 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 157177#L981 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 157176#L1279 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 157175#L985 assume 1 != cleanup_~tmp___0~4; 156414#L985-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 156402#L2809-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 156371#L2836-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 156360#L1536 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 153419#L1600 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 153361#L1613 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 153291#L997 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 153290#L1428-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 153289#L1480-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 153288#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 134252#L671-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 153287#L1445-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 153292#L1466-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 153286#L675-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 131303#L776-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 154806#L2809-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 154805#L2836-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 154804#L2713-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 154803#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 132397#L1428-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 132149#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 126084#L2114-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 127903#L2250-4 assume !(0 != timeShift_~tmp___9~3); 127904#L2341-12 assume 1 == ~doorState~0;~doorState~0 := 0; 154524#L2341-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 140408#L2809-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 140405#L2836-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 140404#L2713-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 140401#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 140403#L1428-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 154841#L1993-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 154839#L2349-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 154840#L2037-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 160030#L3383-21 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 160031#L2041-36 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 136679#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 136677#L2053-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 159224#L801-4 assume !(-1 == ~expectedDirection~0); 159223#L813-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 159215#L1480-14 __utac_acc__Specification3_spec__2_#t~ret61 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~6 := __utac_acc__Specification3_spec__2_#t~ret61;havoc __utac_acc__Specification3_spec__2_#t~ret61; 159216#L818-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6); 159213#L814-4 cleanup_~i~2 := 1 + cleanup_~i~2; 159211#L977-2 [2021-10-21 20:19:36,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:36,462 INFO L82 PathProgramCache]: Analyzing trace with hash -1092943826, now seen corresponding path program 3 times [2021-10-21 20:19:36,463 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:36,464 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1041138869] [2021-10-21 20:19:36,464 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:36,464 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:36,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:36,569 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:36,569 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:36,569 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1041138869] [2021-10-21 20:19:36,570 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1041138869] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:36,570 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:36,570 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:19:36,571 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1851456551] [2021-10-21 20:19:36,571 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-21 20:19:36,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:36,572 INFO L82 PathProgramCache]: Analyzing trace with hash -1056852380, now seen corresponding path program 1 times [2021-10-21 20:19:36,572 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:36,573 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597123739] [2021-10-21 20:19:36,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:36,573 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:36,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:36,802 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:36,803 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:36,803 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597123739] [2021-10-21 20:19:36,803 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597123739] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:36,803 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:36,804 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:19:36,804 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695959559] [2021-10-21 20:19:36,804 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-21 20:19:36,804 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:19:36,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-21 20:19:36,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-21 20:19:36,806 INFO L87 Difference]: Start difference. First operand 38369 states and 71500 transitions. cyclomatic complexity: 33132 Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:37,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:19:37,972 INFO L93 Difference]: Finished difference Result 72628 states and 135009 transitions. [2021-10-21 20:19:37,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-21 20:19:37,972 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 72628 states and 135009 transitions. [2021-10-21 20:19:38,391 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 29887 [2021-10-21 20:19:38,851 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 72628 states to 72520 states and 134901 transitions. [2021-10-21 20:19:38,851 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 72520 [2021-10-21 20:19:38,977 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 72520 [2021-10-21 20:19:38,978 INFO L73 IsDeterministic]: Start isDeterministic. Operand 72520 states and 134901 transitions. [2021-10-21 20:19:39,088 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-21 20:19:39,088 INFO L681 BuchiCegarLoop]: Abstraction has 72520 states and 134901 transitions. [2021-10-21 20:19:39,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72520 states and 134901 transitions. [2021-10-21 20:19:39,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72520 to 47045. [2021-10-21 20:19:39,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47045 states, 47045 states have (on average 1.867786162185142) internal successors, (87870), 47044 states have internal predecessors, (87870), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:40,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47045 states to 47045 states and 87870 transitions. [2021-10-21 20:19:40,317 INFO L704 BuchiCegarLoop]: Abstraction has 47045 states and 87870 transitions. [2021-10-21 20:19:40,317 INFO L587 BuchiCegarLoop]: Abstraction has 47045 states and 87870 transitions. [2021-10-21 20:19:40,318 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-10-21 20:19:40,318 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47045 states and 87870 transitions. [2021-10-21 20:19:40,475 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11304 [2021-10-21 20:19:40,475 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-21 20:19:40,476 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-21 20:19:40,484 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:40,484 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:19:40,485 INFO L791 eck$LassoCheckResult]: Stem: 241927#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 241928#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 240288#L3410 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 238397#L3418 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 238398#L1172 assume 0 != main_~tmp~15; 242629#L1145 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 241465#L2802 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 241466#L569 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 238384#L594 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 238287#L3080 assume 0 == initPersonOnFloor_~floor; 238288#L3081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 236430#L3188-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 239259#L2872 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 237292#L2884-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 242378#L1428 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 241835#L1480 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 241836#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 241458#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 240038#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 237237#L1466-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 238747#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 236910#L776 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243312#L2809 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243307#L2836 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243303#L2713 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 243301#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243300#L1428-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 243296#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 243292#L2114 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 243290#L2250 assume !(0 != timeShift_~tmp___9~3); 243288#L2341 assume !(1 == ~doorState~0); 243282#L2341-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243103#L2809-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243097#L2836-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243096#L2713-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 243093#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243042#L1428-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 243037#L1993 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 243031#L2349 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 240975#L2037 assume !(1 == ~currentHeading~0); 237553#L2047 assume !(0 == ~currentFloorID~0); 237554#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 245381#L2053-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 245379#L801 assume !(-1 == ~expectedDirection~0); 245370#L813 assume !(1 == ~expectedDirection~0); 245219#L814 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245182#L1428-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 245179#L1480-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 245177#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 241849#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 238789#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 237570#L1466-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 239204#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 238849#L776-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 244242#L2809-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243950#L2836-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243945#L2713-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 243838#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243826#L1428-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 243815#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 243811#L2114-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 243809#L2250-1 assume !(0 != timeShift_~tmp___9~3); 243808#L2341-3 assume !(1 == ~doorState~0); 243807#L2341-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243804#L2809-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243800#L2836-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243197#L2713-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 243151#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243045#L1428-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 243039#L1993-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 243034#L2349-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 243033#L2037-3 assume !(1 == ~currentHeading~0); 242967#L2047-9 assume !(0 == ~currentFloorID~0); 237740#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 244253#L2053-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 244245#L801-1 assume !(-1 == ~expectedDirection~0); 243956#L813-1 assume !(1 == ~expectedDirection~0); 243842#L814-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243830#L1428-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 243818#L1480-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 243024#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 238667#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 238668#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 237603#L1466-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 240355#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 238131#L776-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 244050#L2809-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 244045#L2836-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 244044#L2713-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 244040#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 244038#L1428-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 244030#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 244029#L2114-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 244026#L2250-2 assume !(0 != timeShift_~tmp___9~3); 244020#L2341-6 assume !(1 == ~doorState~0); 244018#L2341-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 244016#L2809-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 244006#L2836-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 244004#L2713-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 243958#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243843#L1428-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 243831#L1993-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 243819#L2349-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 243026#L2037-6 assume !(1 == ~currentHeading~0); 242324#L2047-18 assume !(0 == ~currentFloorID~0); 240595#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 245146#L2053-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 245143#L801-2 assume !(-1 == ~expectedDirection~0); 245140#L813-2 assume !(1 == ~expectedDirection~0); 245138#L814-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 245135#L569-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 245131#L594-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 245127#L3080-1 assume 0 == initPersonOnFloor_~floor; 245100#L3081-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 245095#L3188-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 245094#L2872-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 245089#L2884-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245088#L1428-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 245087#L1480-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 245085#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 241781#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 239114#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 237538#L1466-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 238921#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 237989#L776-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243749#L2809-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243745#L2836-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243744#L2713-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 243742#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243743#L1428-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 243711#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 243710#L2114-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 243708#L2250-3 assume !(0 != timeShift_~tmp___9~3); 243707#L2341-9 assume !(1 == ~doorState~0); 243702#L2341-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 243700#L2809-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 243695#L2836-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 243694#L2713-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 243586#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 243574#L1428-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 243571#L1993-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 243569#L2349-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 243570#L2037-9 assume !(1 == ~currentHeading~0); 241850#L2047-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 241851#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 271556#L2053-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 275480#L801-3 assume !(-1 == ~expectedDirection~0); 275474#L813-3 assume !(1 == ~expectedDirection~0); 275463#L814-3 cleanup_~i~2 := 0; 275462#L977-2 [2021-10-21 20:19:40,486 INFO L793 eck$LassoCheckResult]: Loop: 275462#L977-2 assume !false; 275461#L978 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 275460#L981 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 275459#L1279 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 275458#L985 assume 1 != cleanup_~tmp___0~4; 275442#L985-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 275440#L2809-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 275434#L2836-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 275433#L1536 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 275371#L1600 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 275319#L1613 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 268279#L997 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 268280#L1428-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 268275#L1480-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 268276#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 268271#L671-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 268272#L1445-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 275302#L1466-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 268235#L675-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 268231#L776-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 268226#L2809-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 268225#L2836-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 268215#L2713-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 268199#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 268191#L1428-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 268184#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 268182#L2114-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 268180#L2250-4 assume !(0 != timeShift_~tmp___9~3); 268178#L2341-12 assume 1 == ~doorState~0;~doorState~0 := 0; 268179#L2341-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 268173#L2809-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 268170#L2836-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 268168#L2713-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 268169#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 281172#L1428-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 281171#L1993-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 268048#L2349-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 268049#L2037-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 278856#L3383-21 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 278853#L2041-36 assume !(0 != continueInDirection_~tmp~21); 278848#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 242830#L2053-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 278841#L801-4 assume !(-1 == ~expectedDirection~0); 278839#L813-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 275466#L1480-14 __utac_acc__Specification3_spec__2_#t~ret61 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~6 := __utac_acc__Specification3_spec__2_#t~ret61;havoc __utac_acc__Specification3_spec__2_#t~ret61; 275467#L818-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6); 275464#L814-4 cleanup_~i~2 := 1 + cleanup_~i~2; 275462#L977-2 [2021-10-21 20:19:40,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:40,487 INFO L82 PathProgramCache]: Analyzing trace with hash -1092943826, now seen corresponding path program 4 times [2021-10-21 20:19:40,487 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:40,487 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1395541069] [2021-10-21 20:19:40,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:40,488 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:40,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:40,562 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:40,562 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:19:40,562 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1395541069] [2021-10-21 20:19:40,563 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1395541069] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:19:40,563 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:19:40,563 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:19:40,563 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1316069158] [2021-10-21 20:19:40,564 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-21 20:19:40,564 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:40,564 INFO L82 PathProgramCache]: Analyzing trace with hash -1866199006, now seen corresponding path program 1 times [2021-10-21 20:19:40,565 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:19:40,565 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [617203615] [2021-10-21 20:19:40,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:19:40,566 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:19:40,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-10-21 20:19:40,589 INFO L354 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-10-21 20:19:40,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-10-21 20:19:40,653 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-10-21 20:19:42,739 INFO L210 LassoAnalysis]: Preferences: [2021-10-21 20:19:42,739 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-10-21 20:19:42,739 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-10-21 20:19:42,740 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-10-21 20:19:42,740 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-10-21 20:19:42,740 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:42,740 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-10-21 20:19:42,740 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-10-21 20:19:42,740 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration5_Loop [2021-10-21 20:19:42,740 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-10-21 20:19:42,740 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-10-21 20:19:42,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,810 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,860 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,862 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,899 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,922 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,925 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,930 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,941 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,963 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,989 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:42,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,002 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,007 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,048 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,050 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,072 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,080 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:43,867 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-10-21 20:19:43,868 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-10-21 20:19:43,870 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:43,870 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:43,892 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:43,900 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:43,901 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:43,912 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-10-21 20:19:43,930 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:43,930 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:43,967 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:43,967 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:43,967 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:43,969 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:43,983 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:43,983 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:43,992 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-10-21 20:19:44,023 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,023 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,109 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-10-21 20:19:44,110 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,110 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,119 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,139 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,139 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,140 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-10-21 20:19:44,161 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,161 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,196 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,197 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,197 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,198 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,207 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,208 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,218 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-10-21 20:19:44,235 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,235 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,295 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,296 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,296 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,297 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,307 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,307 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,317 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-10-21 20:19:44,327 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,327 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~13=0} Honda state: {ULTIMATE.start_cleanup_~tmp~13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,362 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,363 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,363 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,364 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,369 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,370 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,386 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-10-21 20:19:44,387 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,387 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,426 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,427 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,427 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,428 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,434 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,434 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,444 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-10-21 20:19:44,459 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,459 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret126=0} Honda state: {ULTIMATE.start_timeShift_#t~ret126=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,494 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,494 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,494 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,501 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,505 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,505 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,505 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-10-21 20:19:44,523 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,523 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,553 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,553 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,553 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,554 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-10-21 20:19:44,556 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,556 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,576 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,577 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret123=0} Honda state: {ULTIMATE.start_timeShift_#t~ret123=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,613 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,613 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,613 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,614 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,620 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,620 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,623 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-10-21 20:19:44,628 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,628 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret101=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret101=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,649 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,650 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,650 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,651 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,652 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-10-21 20:19:44,652 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,652 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,673 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,673 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=-4, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~23=-4, ULTIMATE.start_isFloorCalling_#res=-4, ULTIMATE.start_isFloorCalling_~retValue_acc~25=-4, ~calls_0~0=-4, ULTIMATE.start_isExecutiveFloorCalling_#res=-4, ULTIMATE.start_stopRequestedInDirection_~tmp___0~8=-4, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23=-4} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=-4, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~23=-4, ULTIMATE.start_isFloorCalling_#res=-4, ULTIMATE.start_isFloorCalling_~retValue_acc~25=-4, ~calls_0~0=-4, ULTIMATE.start_isExecutiveFloorCalling_#res=-4, ULTIMATE.start_stopRequestedInDirection_~tmp___0~8=-4, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23=-4} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,701 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,701 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,702 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,702 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,703 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-10-21 20:19:44,703 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,703 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,711 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,711 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=1} Honda state: {~expectedDirection~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,733 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,733 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,733 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,734 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,735 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2021-10-21 20:19:44,735 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,735 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,743 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,743 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,762 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,762 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,762 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,763 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2021-10-21 20:19:44,764 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,764 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,775 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,775 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,793 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,794 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,794 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,803 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,807 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2021-10-21 20:19:44,809 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,809 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,830 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,830 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret125=0} Honda state: {ULTIMATE.start_timeShift_#t~ret125=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,853 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2021-10-21 20:19:44,854 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,854 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,854 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,855 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2021-10-21 20:19:44,856 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,856 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,864 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,864 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,885 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,885 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,885 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,886 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,887 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2021-10-21 20:19:44,887 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,888 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,895 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-21 20:19:44,895 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret82=0} Honda state: {ULTIMATE.start_isIdle_#t~ret82=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-21 20:19:44,914 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,914 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,914 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,915 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,917 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2021-10-21 20:19:44,918 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-21 20:19:44,918 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:44,950 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:44,950 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:44,950 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:44,951 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:44,954 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2021-10-21 20:19:44,954 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-10-21 20:19:44,954 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-21 20:19:45,607 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-10-21 20:19:45,611 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Ended with exit code 0 [2021-10-21 20:19:45,611 INFO L210 LassoAnalysis]: Preferences: [2021-10-21 20:19:45,611 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-10-21 20:19:45,611 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-10-21 20:19:45,612 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-10-21 20:19:45,612 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-10-21 20:19:45,612 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:45,612 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-10-21 20:19:45,612 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-10-21 20:19:45,612 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration5_Loop [2021-10-21 20:19:45,612 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-10-21 20:19:45,612 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-10-21 20:19:45,616 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,620 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,623 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,626 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,630 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,632 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,634 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,639 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,641 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,645 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,648 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,650 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,655 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,658 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,660 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,670 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,677 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,679 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,680 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,683 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,686 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,690 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,693 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,695 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,697 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,699 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,712 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,717 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,805 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,843 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,851 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,853 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,862 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,880 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,908 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,912 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:45,914 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-21 20:19:46,644 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-10-21 20:19:46,655 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-10-21 20:19:46,657 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:46,657 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:46,658 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:46,665 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:46,674 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:46,674 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:46,675 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:46,675 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:46,675 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:46,677 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:46,677 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:46,678 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2021-10-21 20:19:46,687 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:46,721 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:46,724 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:46,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:46,725 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:46,728 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:46,737 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:46,737 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:46,738 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:46,738 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:46,738 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:46,738 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:46,738 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:46,740 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2021-10-21 20:19:46,756 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:46,794 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:46,796 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:46,796 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:46,798 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:46,804 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:46,813 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:46,813 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:46,813 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:46,813 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:46,813 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:46,814 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:46,814 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:46,815 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2021-10-21 20:19:46,835 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:46,867 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:46,867 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:46,867 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:46,868 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:46,870 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:46,879 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:46,879 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:46,879 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:46,879 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:46,879 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:46,880 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:46,880 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:46,886 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2021-10-21 20:19:46,895 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:46,927 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:46,927 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:46,927 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:46,928 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:46,932 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:46,940 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:46,940 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:46,941 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:46,941 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:46,941 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:46,942 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:46,942 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:46,944 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2021-10-21 20:19:46,957 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:46,978 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:46,978 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:46,978 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:46,979 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:46,980 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2021-10-21 20:19:46,980 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:46,987 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:46,987 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:46,987 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:46,987 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:46,987 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:46,988 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:46,988 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:46,990 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,009 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:47,009 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,010 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,011 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,012 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2021-10-21 20:19:47,013 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,020 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,020 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,020 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,020 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,020 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,021 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,021 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,021 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,040 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2021-10-21 20:19:47,040 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,040 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,042 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,043 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2021-10-21 20:19:47,044 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,050 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,050 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,051 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,051 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,051 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,051 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,051 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,053 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,071 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:47,072 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,072 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,072 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,074 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2021-10-21 20:19:47,084 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,093 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,093 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,093 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,093 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,093 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,094 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,094 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,107 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,131 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:47,131 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,131 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,132 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,132 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2021-10-21 20:19:47,133 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,140 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,140 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,140 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,140 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,140 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,140 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,140 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,141 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,159 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Ended with exit code 0 [2021-10-21 20:19:47,160 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,160 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,161 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,163 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2021-10-21 20:19:47,164 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,170 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,171 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,171 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,171 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,171 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,172 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,172 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,173 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,194 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:47,194 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,194 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,195 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,196 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2021-10-21 20:19:47,197 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,206 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,206 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,206 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,206 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,206 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,207 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,207 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,223 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,242 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2021-10-21 20:19:47,242 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,242 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,243 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,244 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2021-10-21 20:19:47,247 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,255 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,255 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,255 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,255 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,255 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,256 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,256 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,287 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,312 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2021-10-21 20:19:47,313 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,313 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,322 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,323 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,332 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,332 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,332 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,333 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,333 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,333 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,333 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,335 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2021-10-21 20:19:47,343 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,377 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:47,378 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,378 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,380 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,382 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,391 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,391 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,391 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,391 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,391 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,392 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,392 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,393 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2021-10-21 20:19:47,407 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-21 20:19:47,434 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2021-10-21 20:19:47,434 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,434 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,435 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,436 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2021-10-21 20:19:47,436 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-21 20:19:47,445 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-21 20:19:47,445 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-21 20:19:47,445 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-21 20:19:47,445 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-21 20:19:47,446 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-21 20:19:47,447 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-21 20:19:47,447 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-21 20:19:47,459 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-10-21 20:19:47,464 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2021-10-21 20:19:47,464 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-10-21 20:19:47,466 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-21 20:19:47,466 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:19:47,489 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-21 20:19:47,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2021-10-21 20:19:47,499 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-10-21 20:19:47,499 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-10-21 20:19:47,499 INFO L513 LassoAnalysis]: Proved termination. [2021-10-21 20:19:47,500 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2021-10-21 20:19:47,533 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:47,535 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-10-21 20:19:47,555 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:19:47,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:47,768 INFO L263 TraceCheckSpWp]: Trace formula consists of 1177 conjuncts, 2 conjunts are in the unsatisfiable core [2021-10-21 20:19:47,780 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-21 20:19:48,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:19:48,303 INFO L263 TraceCheckSpWp]: Trace formula consists of 193 conjuncts, 5 conjunts are in the unsatisfiable core [2021-10-21 20:19:48,305 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-21 20:19:48,706 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:19:48,712 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2021-10-21 20:19:48,713 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 47045 states and 87870 transitions. cyclomatic complexity: 40826 Second operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:49,358 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2021-10-21 20:19:49,686 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 47045 states and 87870 transitions. cyclomatic complexity: 40826. Second operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 58349 states and 108942 transitions. Complement of second has 8 states. [2021-10-21 20:19:49,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2021-10-21 20:19:49,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:49,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11458 transitions. [2021-10-21 20:19:49,702 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11458 transitions. Stem has 149 letters. Loop has 47 letters. [2021-10-21 20:19:49,707 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-21 20:19:49,707 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11458 transitions. Stem has 196 letters. Loop has 47 letters. [2021-10-21 20:19:49,711 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-21 20:19:49,711 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11458 transitions. Stem has 149 letters. Loop has 94 letters. [2021-10-21 20:19:49,712 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-21 20:19:49,712 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58349 states and 108942 transitions. [2021-10-21 20:19:50,239 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-21 20:19:50,240 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58349 states to 0 states and 0 transitions. [2021-10-21 20:19:50,240 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2021-10-21 20:19:50,240 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2021-10-21 20:19:50,240 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2021-10-21 20:19:50,240 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-21 20:19:50,240 INFO L681 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-21 20:19:50,240 INFO L704 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-21 20:19:50,241 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:19:50,241 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-21 20:19:50,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-21 20:19:50,241 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand has 4 states, 4 states have (on average 37.25) internal successors, (149), 4 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:19:50,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:19:50,242 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2021-10-21 20:19:50,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-21 20:19:50,242 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2021-10-21 20:19:50,242 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-21 20:19:50,242 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2021-10-21 20:19:50,243 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2021-10-21 20:19:50,243 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2021-10-21 20:19:50,243 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2021-10-21 20:19:50,243 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-21 20:19:50,243 INFO L681 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-21 20:19:50,243 INFO L704 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-21 20:19:50,243 INFO L587 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-21 20:19:50,243 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-10-21 20:19:50,243 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2021-10-21 20:19:50,244 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-21 20:19:50,244 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2021-10-21 20:19:50,249 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 21.10 08:19:50 BoogieIcfgContainer [2021-10-21 20:19:50,249 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2021-10-21 20:19:50,250 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-21 20:19:50,250 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-21 20:19:50,250 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-21 20:19:50,251 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.10 08:19:06" (3/4) ... [2021-10-21 20:19:50,253 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-10-21 20:19:50,253 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-21 20:19:50,255 INFO L168 Benchmark]: Toolchain (without parser) took 54511.98 ms. Allocated memory was 92.3 MB in the beginning and 6.3 GB in the end (delta: 6.2 GB). Free memory was 54.4 MB in the beginning and 5.3 GB in the end (delta: -5.2 GB). Peak memory consumption was 962.7 MB. Max. memory is 16.1 GB. [2021-10-21 20:19:50,255 INFO L168 Benchmark]: CDTParser took 0.25 ms. Allocated memory is still 92.3 MB. Free memory was 63.4 MB in the beginning and 63.4 MB in the end (delta: 28.5 kB). There was no memory consumed. Max. memory is 16.1 GB. [2021-10-21 20:19:50,256 INFO L168 Benchmark]: CACSL2BoogieTranslator took 898.85 ms. Allocated memory was 92.3 MB in the beginning and 130.0 MB in the end (delta: 37.7 MB). Free memory was 54.3 MB in the beginning and 76.5 MB in the end (delta: -22.2 MB). Peak memory consumption was 16.9 MB. Max. memory is 16.1 GB. [2021-10-21 20:19:50,256 INFO L168 Benchmark]: Boogie Procedure Inliner took 375.90 ms. Allocated memory is still 130.0 MB. Free memory was 76.5 MB in the beginning and 66.3 MB in the end (delta: 10.2 MB). Peak memory consumption was 43.1 MB. Max. memory is 16.1 GB. [2021-10-21 20:19:50,256 INFO L168 Benchmark]: Boogie Preprocessor took 624.03 ms. Allocated memory was 130.0 MB in the beginning and 260.0 MB in the end (delta: 130.0 MB). Free memory was 66.3 MB in the beginning and 180.8 MB in the end (delta: -114.5 MB). Peak memory consumption was 62.0 MB. Max. memory is 16.1 GB. [2021-10-21 20:19:50,257 INFO L168 Benchmark]: RCFGBuilder took 9094.56 ms. Allocated memory was 260.0 MB in the beginning and 520.1 MB in the end (delta: 260.0 MB). Free memory was 180.8 MB in the beginning and 322.4 MB in the end (delta: -141.6 MB). Peak memory consumption was 299.7 MB. Max. memory is 16.1 GB. [2021-10-21 20:19:50,257 INFO L168 Benchmark]: BuchiAutomizer took 43504.44 ms. Allocated memory was 520.1 MB in the beginning and 6.3 GB in the end (delta: 5.8 GB). Free memory was 322.4 MB in the beginning and 5.3 GB in the end (delta: -5.0 GB). Peak memory consumption was 801.1 MB. Max. memory is 16.1 GB. [2021-10-21 20:19:50,258 INFO L168 Benchmark]: Witness Printer took 3.62 ms. Allocated memory is still 6.3 GB. Free memory was 5.3 GB in the beginning and 5.3 GB in the end (delta: 1.1 MB). Peak memory consumption was 2.1 MB. Max. memory is 16.1 GB. [2021-10-21 20:19:50,260 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25 ms. Allocated memory is still 92.3 MB. Free memory was 63.4 MB in the beginning and 63.4 MB in the end (delta: 28.5 kB). There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 898.85 ms. Allocated memory was 92.3 MB in the beginning and 130.0 MB in the end (delta: 37.7 MB). Free memory was 54.3 MB in the beginning and 76.5 MB in the end (delta: -22.2 MB). Peak memory consumption was 16.9 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 375.90 ms. Allocated memory is still 130.0 MB. Free memory was 76.5 MB in the beginning and 66.3 MB in the end (delta: 10.2 MB). Peak memory consumption was 43.1 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 624.03 ms. Allocated memory was 130.0 MB in the beginning and 260.0 MB in the end (delta: 130.0 MB). Free memory was 66.3 MB in the beginning and 180.8 MB in the end (delta: -114.5 MB). Peak memory consumption was 62.0 MB. Max. memory is 16.1 GB. * RCFGBuilder took 9094.56 ms. Allocated memory was 260.0 MB in the beginning and 520.1 MB in the end (delta: 260.0 MB). Free memory was 180.8 MB in the beginning and 322.4 MB in the end (delta: -141.6 MB). Peak memory consumption was 299.7 MB. Max. memory is 16.1 GB. * BuchiAutomizer took 43504.44 ms. Allocated memory was 520.1 MB in the beginning and 6.3 GB in the end (delta: 5.8 GB). Free memory was 322.4 MB in the beginning and 5.3 GB in the end (delta: -5.0 GB). Peak memory consumption was 801.1 MB. Max. memory is 16.1 GB. * Witness Printer took 3.62 ms. Allocated memory is still 6.3 GB. Free memory was 5.3 GB in the beginning and 5.3 GB in the end (delta: 1.1 MB). Peak memory consumption was 2.1 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function -1 * i + cleanupTimeShifts and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 13 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 43.4s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 8.7s. Construction of modules took 16.2s. Büchi inclusion checks took 11.0s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 3102.3ms AutomataMinimizationTime, 4 MinimizatonAttempts, 48739 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 2.4s Buchi closure took 0.2s. Biggest automaton had 47045 states and ocurred in iteration 4. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 93349 SDtfs, 238642 SDslu, 266871 SDs, 0 SdLazy, 30170 SolverSat, 1924 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 16267.0ms Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital211 mio100 ax100 hnf100 lsp16 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq211 hnf87 smp100 dnf152 smp100 tf102 neg97 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 30ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 17 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.1s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! [2021-10-21 20:19:50,305 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_859ce9f0-07a3-4466-af8a-5e0d10996720/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Ended with exit code 0 Received shutdown request...