./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version b2eff8ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ec740d4c0b0b941516a7691cfe22f258e1a0e4fdd205bb4a0c04151c297a8c86 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-b2eff8b [2021-10-28 23:40:22,113 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-28 23:40:22,116 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-28 23:40:22,180 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-28 23:40:22,181 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-28 23:40:22,185 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-28 23:40:22,187 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-28 23:40:22,191 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-28 23:40:22,194 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-28 23:40:22,199 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-28 23:40:22,201 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-28 23:40:22,203 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-28 23:40:22,203 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-28 23:40:22,206 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-28 23:40:22,208 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-28 23:40:22,212 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-28 23:40:22,214 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-28 23:40:22,215 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-28 23:40:22,217 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-28 23:40:22,225 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-28 23:40:22,227 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-28 23:40:22,228 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-28 23:40:22,232 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-28 23:40:22,233 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-28 23:40:22,242 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-28 23:40:22,243 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-28 23:40:22,243 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-28 23:40:22,245 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-28 23:40:22,246 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-28 23:40:22,248 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-28 23:40:22,249 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-28 23:40:22,250 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-28 23:40:22,252 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-28 23:40:22,253 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-28 23:40:22,255 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-28 23:40:22,255 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-28 23:40:22,256 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-28 23:40:22,256 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-28 23:40:22,256 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-28 23:40:22,257 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-28 23:40:22,258 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-28 23:40:22,259 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-10-28 23:40:22,307 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-28 23:40:22,308 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-28 23:40:22,309 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-28 23:40:22,309 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-28 23:40:22,310 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-28 23:40:22,311 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-28 23:40:22,311 INFO L138 SettingsManager]: * Use SBE=true [2021-10-28 23:40:22,311 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-10-28 23:40:22,311 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-10-28 23:40:22,312 INFO L138 SettingsManager]: * Use old map elimination=false [2021-10-28 23:40:22,313 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-10-28 23:40:22,313 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-10-28 23:40:22,313 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-10-28 23:40:22,314 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-28 23:40:22,314 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-28 23:40:22,314 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-10-28 23:40:22,314 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-28 23:40:22,314 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-28 23:40:22,315 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-28 23:40:22,315 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-10-28 23:40:22,315 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-10-28 23:40:22,315 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-10-28 23:40:22,316 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-28 23:40:22,316 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-28 23:40:22,316 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-10-28 23:40:22,316 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-28 23:40:22,316 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-10-28 23:40:22,317 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-28 23:40:22,317 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-28 23:40:22,317 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-28 23:40:22,317 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-28 23:40:22,318 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-28 23:40:22,319 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-10-28 23:40:22,319 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ec740d4c0b0b941516a7691cfe22f258e1a0e4fdd205bb4a0c04151c297a8c86 [2021-10-28 23:40:22,636 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-28 23:40:22,669 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-28 23:40:22,672 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-28 23:40:22,674 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-28 23:40:22,675 INFO L275 PluginConnector]: CDTParser initialized [2021-10-28 23:40:22,676 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/../../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c [2021-10-28 23:40:22,791 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/data/08fe03539/f382d65f21564cffa4346effd445cfb9/FLAGd80dc8c84 [2021-10-28 23:40:23,478 INFO L306 CDTParser]: Found 1 translation units. [2021-10-28 23:40:23,479 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c [2021-10-28 23:40:23,512 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/data/08fe03539/f382d65f21564cffa4346effd445cfb9/FLAGd80dc8c84 [2021-10-28 23:40:23,628 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/data/08fe03539/f382d65f21564cffa4346effd445cfb9 [2021-10-28 23:40:23,632 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-28 23:40:23,634 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-28 23:40:23,636 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-28 23:40:23,636 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-28 23:40:23,639 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-28 23:40:23,640 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 11:40:23" (1/1) ... [2021-10-28 23:40:23,642 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@15adac5b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:23, skipping insertion in model container [2021-10-28 23:40:23,642 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 11:40:23" (1/1) ... [2021-10-28 23:40:23,649 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-28 23:40:23,711 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-28 23:40:24,067 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c[33356,33369] [2021-10-28 23:40:24,246 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 23:40:24,268 INFO L203 MainTranslator]: Completed pre-run [2021-10-28 23:40:24,383 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c[33356,33369] [2021-10-28 23:40:24,482 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 23:40:24,511 INFO L208 MainTranslator]: Completed translation [2021-10-28 23:40:24,512 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24 WrapperNode [2021-10-28 23:40:24,512 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-28 23:40:24,513 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-28 23:40:24,513 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-28 23:40:24,513 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-28 23:40:24,521 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:24,571 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:24,900 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-28 23:40:24,901 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-28 23:40:24,902 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-28 23:40:24,902 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-28 23:40:24,910 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:24,911 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:24,956 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:24,957 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:25,197 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:25,329 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:25,347 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:25,400 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-28 23:40:25,401 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-28 23:40:25,401 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-28 23:40:25,402 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-28 23:40:25,403 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (1/1) ... [2021-10-28 23:40:25,410 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:40:25,422 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:40:25,438 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:40:25,454 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-10-28 23:40:25,492 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-28 23:40:25,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-28 23:40:25,493 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-28 23:40:25,493 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-28 23:40:34,584 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-28 23:40:34,585 INFO L299 CfgBuilder]: Removed 1257 assume(true) statements. [2021-10-28 23:40:34,595 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 11:40:34 BoogieIcfgContainer [2021-10-28 23:40:34,596 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-28 23:40:34,597 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-10-28 23:40:34,597 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-10-28 23:40:34,600 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-10-28 23:40:34,601 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-28 23:40:34,601 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 28.10 11:40:23" (1/3) ... [2021-10-28 23:40:34,603 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6b8df436 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.10 11:40:34, skipping insertion in model container [2021-10-28 23:40:34,603 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-28 23:40:34,603 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:40:24" (2/3) ... [2021-10-28 23:40:34,603 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6b8df436 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.10 11:40:34, skipping insertion in model container [2021-10-28 23:40:34,604 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-10-28 23:40:34,604 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 11:40:34" (3/3) ... [2021-10-28 23:40:34,605 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product03.cil.c [2021-10-28 23:40:34,656 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-10-28 23:40:34,656 INFO L360 BuchiCegarLoop]: Hoare is false [2021-10-28 23:40:34,657 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-10-28 23:40:34,657 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-10-28 23:40:34,657 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-10-28 23:40:34,657 INFO L364 BuchiCegarLoop]: Difference is false [2021-10-28 23:40:34,657 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-10-28 23:40:34,657 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-10-28 23:40:34,772 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5813 states, 5812 states have (on average 1.895216792842395) internal successors, (11015), 5812 states have internal predecessors, (11015), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:34,908 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1180 [2021-10-28 23:40:34,908 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-28 23:40:34,908 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-28 23:40:34,930 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:34,931 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:34,931 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-10-28 23:40:34,948 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5813 states, 5812 states have (on average 1.895216792842395) internal successors, (11015), 5812 states have internal predecessors, (11015), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:35,153 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1180 [2021-10-28 23:40:35,153 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-28 23:40:35,153 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-28 23:40:35,161 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:35,161 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:35,172 INFO L791 eck$LassoCheckResult]: Stem: 3573#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5699#L-1true havoc main_#res;havoc main_#t~ret174, main_~retValue_acc~29, main_~tmp~25;havoc main_~retValue_acc~29;havoc main_~tmp~25; 928#L1415true havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 2737#L1423true main_#t~ret174 := valid_product_#res;main_~tmp~25 := main_#t~ret174;havoc main_#t~ret174; 1692#L3392true assume 0 != main_~tmp~25; 721#L3369true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5095#L786true havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 5158#L2983true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 4169#L3008true bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1779#L1064true assume 0 == initPersonOnFloor_~floor; 745#L1065true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5377#L1172-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 881#L856true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2021#L868-2true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 3628#L1640true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 269#L1692true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 3404#L542true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 4775#L543true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 2287#L1657true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 287#L1678true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 3836#L547true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 354#L648true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5700#L793true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3078#L820true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 5139#L2925true stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 2936#L2309true assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 4989#L1640-1true stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 3212#L2313true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3630#L2326true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 5137#L2462true assume !(0 != timeShift_~tmp___9~3); 2108#L2553true assume !(1 == ~doorState~0); 4025#L2553-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2743#L793-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1633#L820-3true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 4038#L2925-1true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 3625#L2192true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1095#L1640-2true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 4916#L2205true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1902#L2561true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 4247#L2249true assume !(1 == ~currentHeading~0); 2661#L2259true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2025#L2259-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5057#L2265-5true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3079#L673true assume !(-1 == ~expectedDirection~0); 2623#L685true assume !(1 == ~expectedDirection~0); 1369#L686true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 2067#L1640-4true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 311#L1692-3true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 3115#L542-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 5195#L543-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 457#L1657-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 4990#L1678-12true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 3866#L547-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4082#L648-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 327#L793-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5128#L820-25true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 1543#L2925-3true stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 3726#L2309-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5037#L1640-5true stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 996#L2313-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 5034#L2326-1true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 618#L2462-1true assume !(0 != timeShift_~tmp___9~3); 5119#L2553-3true assume !(1 == ~doorState~0); 4422#L2553-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4309#L793-28true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3669#L820-28true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 2193#L2925-4true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 5667#L2192-2true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 653#L1640-6true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 2502#L2205-2true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 4030#L2561-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 627#L2249-3true assume !(1 == ~currentHeading~0); 2954#L2259-9true assume !(0 == ~currentFloorID~0); 493#L2259-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4915#L2265-11true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 345#L673-1true assume !(-1 == ~expectedDirection~0); 4116#L685-1true assume !(1 == ~expectedDirection~0); 4658#L686-1true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5756#L1640-8true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 1270#L1692-6true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2436#L542-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1357#L604-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 2396#L1657-29true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1508#L1678-29true __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 4215#L608-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 731#L648-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2187#L793-50true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2507#L820-50true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 2077#L2925-6true stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 3597#L2309-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 3844#L1640-9true stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 3297#L2313-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1618#L2326-2true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1252#L2462-2true assume !(0 != timeShift_~tmp___9~3); 877#L2553-6true assume !(1 == ~doorState~0); 5528#L2553-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1033#L793-53true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3666#L820-53true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 4680#L2925-7true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 2905#L2192-4true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5323#L1640-10true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 670#L2205-4true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 5753#L2561-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 4827#L2249-6true assume !(1 == ~currentHeading~0); 5365#L2259-18true assume !(0 == ~currentFloorID~0); 2628#L2259-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5265#L2265-17true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 4368#L673-2true assume !(-1 == ~expectedDirection~0); 1459#L685-2true assume !(1 == ~expectedDirection~0); 2269#L686-2true havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 183#L2983-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 5056#L3008-1true bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 245#L1064-1true assume 0 == initPersonOnFloor_~floor; 4471#L1065-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3969#L1172-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4951#L856-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5219#L868-5true havoc cleanup_#t~ret168, cleanup_#t~ret169, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 33#L1640-12true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 3560#L1692-9true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 833#L542-3true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3856#L604-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 4031#L1657-41true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 2378#L1678-41true __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 2051#L608-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1555#L648-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 428#L793-75true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3391#L820-75true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 626#L2925-9true stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 3857#L2309-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 3080#L1640-13true stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 2461#L2313-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3919#L2326-3true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2984#L2462-3true assume !(0 != timeShift_~tmp___9~3); 957#L2553-9true assume !(1 == ~doorState~0); 1160#L2553-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3832#L793-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1054#L820-78true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 2855#L2925-10true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 5074#L2192-6true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1298#L1640-14true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 3004#L2205-6true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2944#L2561-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 458#L2249-9true assume !(1 == ~currentHeading~0); 2303#L2259-27true assume !(0 == ~currentFloorID~0); 61#L2259-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3038#L2265-23true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2979#L673-3true assume !(-1 == ~expectedDirection~0); 3997#L685-3true assume !(1 == ~expectedDirection~0); 2526#L686-3true cleanup_~i~3 := 0; 5780#L3201-2true [2021-10-28 23:40:35,175 INFO L793 eck$LassoCheckResult]: Loop: 5780#L3201-2true assume !false; 536#L3202true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 987#L3205true assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 3875#L1511true cleanup_#t~ret168 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret168;havoc cleanup_#t~ret168; 3129#L3209true assume 1 != cleanup_~tmp___0~12; 849#L3209-1true havoc isIdle_#res;havoc isIdle_#t~ret68, isIdle_~retValue_acc~15, isIdle_~tmp~8;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~8;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~7, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~7;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3548#L793-100true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 562#L820-100true anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1083#L1748true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1825#L1812true isIdle_#t~ret68 := anyStopRequested_#res;isIdle_~tmp~8 := isIdle_#t~ret68;havoc isIdle_#t~ret68;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~8 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1961#L1825true cleanup_#t~ret169 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret169;havoc cleanup_#t~ret169; 2647#L3221true assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1786#L1640-16true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 5316#L1692-12true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 3188#L542-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 934#L543-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 5127#L1657-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1666#L1678-48true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 5489#L547-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1403#L648-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5805#L793-105true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5641#L820-105true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 5086#L2925-12true stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 2803#L2309-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1119#L1640-17true stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 1316#L2313-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 5457#L2326-4true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1276#L2462-4true assume !(0 != timeShift_~tmp___9~3); 830#L2553-12true assume 1 == ~doorState~0;~doorState~0 := 0; 898#L2553-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5602#L793-108true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5370#L820-108true isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 2638#L2925-13true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 3228#L2192-8true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1098#L1640-18true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 3756#L2205-8true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 332#L2561-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 1563#L2249-12true assume !(1 == ~currentHeading~0); 1047#L2259-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4126#L2259-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3338#L2265-29true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 5380#L673-4true assume !(-1 == ~expectedDirection~0); 3520#L685-4true assume !(1 == ~expectedDirection~0); 4064#L686-4true cleanup_~i~3 := 1 + cleanup_~i~3; 5780#L3201-2true [2021-10-28 23:40:35,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:35,188 INFO L85 PathProgramCache]: Analyzing trace with hash -1960143692, now seen corresponding path program 1 times [2021-10-28 23:40:35,197 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:35,198 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1127318172] [2021-10-28 23:40:35,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:35,200 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:35,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:35,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:35,654 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:35,654 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1127318172] [2021-10-28 23:40:35,655 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1127318172] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:35,655 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:35,656 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:40:35,658 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1711374400] [2021-10-28 23:40:35,663 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-28 23:40:35,664 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:35,672 INFO L85 PathProgramCache]: Analyzing trace with hash 190079507, now seen corresponding path program 1 times [2021-10-28 23:40:35,672 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:35,673 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1856611726] [2021-10-28 23:40:35,673 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:35,674 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:35,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:35,800 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:35,801 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:35,802 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1856611726] [2021-10-28 23:40:35,802 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1856611726] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:35,803 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:35,803 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 23:40:35,803 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [979030295] [2021-10-28 23:40:35,805 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-28 23:40:35,806 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:40:35,824 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 23:40:35,827 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:40:35,844 INFO L87 Difference]: Start difference. First operand has 5813 states, 5812 states have (on average 1.895216792842395) internal successors, (11015), 5812 states have internal predecessors, (11015), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:37,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:40:37,533 INFO L93 Difference]: Finished difference Result 11673 states and 21963 transitions. [2021-10-28 23:40:37,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-28 23:40:37,535 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11673 states and 21963 transitions. [2021-10-28 23:40:37,653 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2488 [2021-10-28 23:40:37,779 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11673 states to 11609 states and 21886 transitions. [2021-10-28 23:40:37,780 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11609 [2021-10-28 23:40:37,799 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11609 [2021-10-28 23:40:37,799 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11609 states and 21886 transitions. [2021-10-28 23:40:37,830 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-28 23:40:37,830 INFO L681 BuchiCegarLoop]: Abstraction has 11609 states and 21886 transitions. [2021-10-28 23:40:37,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11609 states and 21886 transitions. [2021-10-28 23:40:38,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11609 to 11079. [2021-10-28 23:40:38,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11079 states, 11079 states have (on average 1.8943045401209495) internal successors, (20987), 11078 states have internal predecessors, (20987), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:38,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11079 states to 11079 states and 20987 transitions. [2021-10-28 23:40:38,231 INFO L704 BuchiCegarLoop]: Abstraction has 11079 states and 20987 transitions. [2021-10-28 23:40:38,232 INFO L587 BuchiCegarLoop]: Abstraction has 11079 states and 20987 transitions. [2021-10-28 23:40:38,232 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-10-28 23:40:38,233 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11079 states and 20987 transitions. [2021-10-28 23:40:38,304 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2264 [2021-10-28 23:40:38,305 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-28 23:40:38,305 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-28 23:40:38,314 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:38,314 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:38,316 INFO L791 eck$LassoCheckResult]: Stem: 22686#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 22687#L-1 havoc main_#res;havoc main_#t~ret174, main_~retValue_acc~29, main_~tmp~25;havoc main_~retValue_acc~29;havoc main_~tmp~25; 19500#L1415 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 19501#L1423 main_#t~ret174 := valid_product_#res;main_~tmp~25 := main_#t~ret174;havoc main_#t~ret174; 20704#L3392 assume 0 != main_~tmp~25; 19132#L3369 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 19133#L786 havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 23546#L2983 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 18505#L3008 bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 20843#L1064 assume 0 == initPersonOnFloor_~floor; 19179#L1065 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 17604#L1172-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 19424#L856 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19425#L868-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 21161#L1640 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 18167#L1692 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 18168#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 21589#L604 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 21590#L1657-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 20096#L1678-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 21783#L608 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 19409#L648 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 24006#L793 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 23999#L820 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 23994#L2925 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 23976#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 23967#L1640-1 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 23954#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 23949#L2326 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 23948#L2462 assume !(0 != timeShift_~tmp___9~3); 23928#L2553 assume !(1 == ~doorState~0); 23919#L2553-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 23772#L793-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 23766#L820-3 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 23765#L2925-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 23762#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 23714#L1640-2 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 23711#L2205 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 23708#L2561 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 23702#L2249 assume !(1 == ~currentHeading~0); 21886#L2259 assume !(0 == ~currentFloorID~0); 21887#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 19106#L2265-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 22290#L673 assume !(-1 == ~expectedDirection~0); 18407#L685 assume !(1 == ~expectedDirection~0); 20241#L686 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 20242#L1640-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 24024#L1692-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 23701#L542-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 17571#L604-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 17572#L1657-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 18196#L1678-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 19392#L608-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 17679#L648-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 18304#L793-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 18305#L820-25 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 20507#L2925-3 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 20508#L2309-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 22823#L1640-5 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 19621#L2313-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 19623#L2326-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 18928#L2462-1 assume !(0 != timeShift_~tmp___9~3); 18930#L2553-3 assume !(1 == ~doorState~0); 23552#L2553-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 25169#L793-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25113#L820-28 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25112#L2925-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 25015#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24981#L1640-6 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 24980#L2205-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 24979#L2561-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 24788#L2249-3 assume !(1 == ~currentHeading~0); 22177#L2259-9 assume !(0 == ~currentFloorID~0); 22178#L2259-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20802#L2265-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 18345#L673-1 assume !(-1 == ~expectedDirection~0); 18346#L685-1 assume !(1 == ~expectedDirection~0); 21767#L686-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 23370#L1640-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 23705#L1692-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 23704#L542-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 20220#L604-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 20221#L1657-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 17675#L1678-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 20454#L608-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 18129#L648-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 19149#L793-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 17974#L820-50 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 21229#L2925-6 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 21230#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 22718#L1640-9 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 22479#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 20232#L2326-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 20064#L2462-2 assume !(0 != timeShift_~tmp___9~3); 19415#L2553-6 assume !(1 == ~doorState~0); 19416#L2553-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 23830#L793-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 23820#L820-53 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 23818#L2925-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 23716#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 23712#L1640-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 23710#L2205-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 23706#L2561-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 23703#L2249-6 assume !(1 == ~currentHeading~0); 23616#L2259-18 assume !(0 == ~currentFloorID~0); 21686#L2259-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 19073#L2265-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 23221#L673-2 assume !(-1 == ~expectedDirection~0); 18141#L685-2 assume !(1 == ~expectedDirection~0); 20381#L686-2 havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 17963#L2983-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 17964#L3008-1 bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 18118#L1064-1 assume 0 == initPersonOnFloor_~floor; 18119#L1065-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 18189#L1172-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 22997#L856-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 25161#L868-5 havoc cleanup_#t~ret168, cleanup_#t~ret169, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24900#L1640-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 24898#L1692-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 24790#L542-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 22916#L604-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 22917#L1657-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 19018#L1678-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 21203#L608-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 21051#L648-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 24618#L793-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 24614#L820-75 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 24613#L2925-9 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 24611#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24612#L1640-13 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 24580#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 24579#L2326-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 24577#L2462-3 assume !(0 != timeShift_~tmp___9~3); 24576#L2553-9 assume !(1 == ~doorState~0); 24575#L2553-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 24148#L793-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 24142#L820-78 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 24141#L2925-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 24134#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24131#L1640-14 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 24128#L2205-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 24030#L2561-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 23698#L2249-9 assume !(1 == ~currentHeading~0); 21489#L2259-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 17668#L2259-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 17669#L2265-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 22198#L673-3 assume !(-1 == ~expectedDirection~0); 21455#L685-3 assume !(1 == ~expectedDirection~0); 23016#L686-3 cleanup_~i~3 := 0; 27234#L3201-2 [2021-10-28 23:40:38,318 INFO L793 eck$LassoCheckResult]: Loop: 27234#L3201-2 assume !false; 27233#L3202 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 19601#L3205 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 19602#L1511 cleanup_#t~ret168 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret168;havoc cleanup_#t~ret168; 22330#L3209 assume 1 != cleanup_~tmp___0~12; 19368#L3209-1 havoc isIdle_#res;havoc isIdle_#t~ret68, isIdle_~retValue_acc~15, isIdle_~tmp~8;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~8;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~7, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~7;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 19369#L793-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 18845#L820-100 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 19779#L1748 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 18373#L1812 isIdle_#t~ret68 := anyStopRequested_#res;isIdle_~tmp~8 := isIdle_#t~ret68;havoc isIdle_#t~ret68;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~8 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 20907#L1825 cleanup_#t~ret169 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret169;havoc cleanup_#t~ret169; 24799#L3221 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 24798#L1640-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 24797#L1692-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 22381#L542-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 19511#L543-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 19512#L1657-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 18684#L1678-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 20671#L547-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 17815#L648-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 25140#L793-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25139#L820-105 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 25134#L2925-12 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 25131#L2309-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25127#L1640-17 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 20161#L2313-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 20163#L2326-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 20099#L2462-4 assume !(0 != timeShift_~tmp___9~3); 19336#L2553-12 assume 1 == ~doorState~0;~doorState~0 := 0; 19337#L2553-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 19450#L793-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 18039#L820-108 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 21868#L2925-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 21869#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 19804#L1640-18 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 19300#L2205-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 18315#L2561-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 18317#L2249-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 20534#L1367-21 continueInDirection_#t~ret83 := isTopFloor_#res;continueInDirection_~tmp~11 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 22140#L2253-36 assume !(0 != continueInDirection_~tmp~11); 19714#L2259-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 19723#L2265-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 27239#L673-4 assume !(-1 == ~expectedDirection~0); 27236#L685-4 assume !(1 == ~expectedDirection~0); 27235#L686-4 cleanup_~i~3 := 1 + cleanup_~i~3; 27234#L3201-2 [2021-10-28 23:40:38,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:38,320 INFO L85 PathProgramCache]: Analyzing trace with hash -1324255426, now seen corresponding path program 1 times [2021-10-28 23:40:38,320 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:38,321 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1325001495] [2021-10-28 23:40:38,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:38,321 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:38,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:38,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:38,518 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:38,519 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1325001495] [2021-10-28 23:40:38,519 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1325001495] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:38,519 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:38,519 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:40:38,520 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702677236] [2021-10-28 23:40:38,522 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-28 23:40:38,524 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:38,526 INFO L85 PathProgramCache]: Analyzing trace with hash -835986723, now seen corresponding path program 1 times [2021-10-28 23:40:38,526 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:38,527 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [454512453] [2021-10-28 23:40:38,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:38,528 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:38,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:38,592 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:38,593 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:38,594 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [454512453] [2021-10-28 23:40:38,595 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [454512453] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:38,595 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:38,595 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:40:38,595 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [868587271] [2021-10-28 23:40:38,596 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-28 23:40:38,596 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:40:38,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:40:38,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:40:38,599 INFO L87 Difference]: Start difference. First operand 11079 states and 20987 transitions. cyclomatic complexity: 9909 Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:39,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:40:39,328 INFO L93 Difference]: Finished difference Result 16510 states and 31255 transitions. [2021-10-28 23:40:39,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:40:39,329 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16510 states and 31255 transitions. [2021-10-28 23:40:39,449 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3409 [2021-10-28 23:40:39,574 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16510 states to 16510 states and 31255 transitions. [2021-10-28 23:40:39,574 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16510 [2021-10-28 23:40:39,596 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16510 [2021-10-28 23:40:39,596 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16510 states and 31255 transitions. [2021-10-28 23:40:39,621 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-28 23:40:39,621 INFO L681 BuchiCegarLoop]: Abstraction has 16510 states and 31255 transitions. [2021-10-28 23:40:39,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16510 states and 31255 transitions. [2021-10-28 23:40:39,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16510 to 16304. [2021-10-28 23:40:39,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16304 states, 16304 states have (on average 1.8944430814524043) internal successors, (30887), 16303 states have internal predecessors, (30887), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:39,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16304 states to 16304 states and 30887 transitions. [2021-10-28 23:40:39,980 INFO L704 BuchiCegarLoop]: Abstraction has 16304 states and 30887 transitions. [2021-10-28 23:40:39,980 INFO L587 BuchiCegarLoop]: Abstraction has 16304 states and 30887 transitions. [2021-10-28 23:40:39,980 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-10-28 23:40:39,980 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16304 states and 30887 transitions. [2021-10-28 23:40:40,070 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3309 [2021-10-28 23:40:40,071 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-28 23:40:40,071 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-28 23:40:40,077 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:40,077 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:40,078 INFO L791 eck$LassoCheckResult]: Stem: 50290#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 50291#L-1 havoc main_#res;havoc main_#t~ret174, main_~retValue_acc~29, main_~tmp~25;havoc main_~retValue_acc~29;havoc main_~tmp~25; 47096#L1415 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 47097#L1423 main_#t~ret174 := valid_product_#res;main_~tmp~25 := main_#t~ret174;havoc main_#t~ret174; 48296#L3392 assume 0 != main_~tmp~25; 46730#L3369 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 46731#L786 havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 51149#L2983 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 46103#L3008 bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 48430#L1064 assume 0 == initPersonOnFloor_~floor; 46777#L1065 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 45203#L1172-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 47017#L856 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 47018#L868-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 48746#L1640 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 45766#L1692 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 45767#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 49174#L604 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 49175#L1657-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 47679#L1678-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 49373#L608 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 47002#L648 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 51651#L793 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 51637#L820 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 51631#L2925 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 51626#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51625#L1640-1 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 51623#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 51620#L2326 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 51619#L2462 assume !(0 != timeShift_~tmp___9~3); 51618#L2553 assume !(1 == ~doorState~0); 51609#L2553-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 51424#L793-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 51419#L820-3 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 51417#L2925-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 51371#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51323#L1640-2 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 51320#L2205 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51316#L2561 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 51309#L2249 assume !(1 == ~currentHeading~0); 49482#L2259 assume !(0 == ~currentFloorID~0); 49483#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 46704#L2265-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 57844#L673 assume !(-1 == ~expectedDirection~0); 46005#L685 assume !(1 == ~expectedDirection~0); 47827#L686 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 47828#L1640-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 52637#L1692-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 52636#L542-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 45171#L604-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 45172#L1657-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 45795#L1678-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 46987#L608-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 45276#L648-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 52633#L793-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 52630#L820-25 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 52615#L2925-3 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 52609#L2309-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 52595#L1640-5 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 52589#L2313-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 52587#L2326-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 52586#L2462-1 assume !(0 != timeShift_~tmp___9~3); 52585#L2553-3 assume !(1 == ~doorState~0); 52584#L2553-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 52514#L793-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 52510#L820-28 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 52507#L2925-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 52460#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 52458#L1640-6 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 52457#L2205-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 52455#L2561-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 52454#L2249-3 assume !(1 == ~currentHeading~0); 49772#L2259-9 assume !(0 == ~currentFloorID~0); 49774#L2259-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57520#L2265-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 57521#L673-1 assume !(-1 == ~expectedDirection~0); 57519#L685-1 assume !(1 == ~expectedDirection~0); 49358#L686-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51318#L1640-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 51313#L1692-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 51312#L542-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 47803#L604-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 47804#L1657-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 45272#L1678-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 48034#L608-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 45728#L648-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 51488#L793-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 51483#L820-50 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 51482#L2925-6 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 51476#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51474#L1640-9 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 51443#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 51442#L2326-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 51439#L2462-2 assume !(0 != timeShift_~tmp___9~3); 51433#L2553-6 assume !(1 == ~doorState~0); 51431#L2553-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 51430#L793-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 51420#L820-53 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 51418#L2925-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 51325#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51321#L1640-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 51319#L2205-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51314#L2561-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 51311#L2249-6 assume !(1 == ~currentHeading~0); 51225#L2259-18 assume !(0 == ~currentFloorID~0); 51227#L2259-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54810#L2265-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 54808#L673-2 assume !(-1 == ~expectedDirection~0); 54805#L685-2 assume !(1 == ~expectedDirection~0); 54795#L686-2 havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 54791#L2983-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 54787#L3008-1 bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 52986#L1064-1 assume 0 == initPersonOnFloor_~floor; 52983#L1065-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 52954#L1172-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 52953#L856-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 52655#L868-5 havoc cleanup_#t~ret168, cleanup_#t~ret169, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 52650#L1640-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 52646#L1692-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 52640#L542-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 50519#L604-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 50520#L1657-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 46617#L1678-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 48788#L608-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 48636#L648-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 51829#L793-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 51825#L820-75 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 51824#L2925-9 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 51822#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51823#L1640-13 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 51791#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 51790#L2326-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 51789#L2462-3 assume !(0 != timeShift_~tmp___9~3); 51788#L2553-9 assume !(1 == ~doorState~0); 51787#L2553-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 51786#L793-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 51776#L820-78 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 51774#L2925-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 51772#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 51734#L1640-14 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 51732#L2205-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51682#L2561-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 51304#L2249-9 assume !(1 == ~currentHeading~0); 49073#L2259-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 49074#L2259-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 54386#L2265-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 56408#L673-3 assume !(-1 == ~expectedDirection~0); 56405#L685-3 assume !(1 == ~expectedDirection~0); 56357#L686-3 cleanup_~i~3 := 0; 56355#L3201-2 [2021-10-28 23:40:40,079 INFO L793 eck$LassoCheckResult]: Loop: 56355#L3201-2 assume !false; 56354#L3202 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 56347#L3205 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 56345#L1511 cleanup_#t~ret168 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret168;havoc cleanup_#t~ret168; 54405#L3209 assume 1 != cleanup_~tmp___0~12; 54379#L3209-1 havoc isIdle_#res;havoc isIdle_#t~ret68, isIdle_~retValue_acc~15, isIdle_~tmp~8;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~8;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~7, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~7;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 54372#L793-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54367#L820-100 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 52933#L1748 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 52924#L1812 isIdle_#t~ret68 := anyStopRequested_#res;isIdle_~tmp~8 := isIdle_#t~ret68;havoc isIdle_#t~ret68;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~8 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 52922#L1825 cleanup_#t~ret169 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret169;havoc cleanup_#t~ret169; 49471#L3221 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 48438#L1640-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 48439#L1692-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 49980#L542-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 47105#L543-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 47107#L553-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 48103#L564-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 46359#L575-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 45411#L586-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 50320#L648-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58015#L793-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 58014#L820-105 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 58013#L2925-12 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 58011#L2309-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 58012#L1640-17 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 57985#L2313-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 57982#L2326-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 57980#L2462-4 assume !(0 != timeShift_~tmp___9~3); 57979#L2553-12 assume 1 == ~doorState~0;~doorState~0 := 0; 57978#L2553-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 57951#L793-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 57948#L820-108 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 49460#L2925-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 49461#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 57933#L1640-18 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 50454#L2205-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 50455#L2561-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 57932#L2249-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 50249#L1367-21 continueInDirection_#t~ret83 := isTopFloor_#res;continueInDirection_~tmp~11 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 50250#L2253-36 assume !(0 != continueInDirection_~tmp~11); 47305#L2259-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 56314#L2265-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 56313#L673-4 assume !(-1 == ~expectedDirection~0); 49985#L685-4 assume !(1 == ~expectedDirection~0); 56358#L686-4 cleanup_~i~3 := 1 + cleanup_~i~3; 56355#L3201-2 [2021-10-28 23:40:40,080 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:40,080 INFO L85 PathProgramCache]: Analyzing trace with hash -1324255426, now seen corresponding path program 2 times [2021-10-28 23:40:40,080 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:40,080 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1618507500] [2021-10-28 23:40:40,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:40,081 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:40,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:40,165 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:40,165 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:40,166 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1618507500] [2021-10-28 23:40:40,166 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1618507500] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:40,166 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:40,166 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:40:40,167 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1687031562] [2021-10-28 23:40:40,167 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-28 23:40:40,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:40,168 INFO L85 PathProgramCache]: Analyzing trace with hash 735715736, now seen corresponding path program 1 times [2021-10-28 23:40:40,168 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:40,168 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [197122745] [2021-10-28 23:40:40,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:40,169 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:40,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:40,422 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:40,422 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:40,423 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [197122745] [2021-10-28 23:40:40,423 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [197122745] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:40,423 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:40,423 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-10-28 23:40:40,423 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [469032148] [2021-10-28 23:40:40,424 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-28 23:40:40,424 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:40:40,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-10-28 23:40:40,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2021-10-28 23:40:40,425 INFO L87 Difference]: Start difference. First operand 16304 states and 30887 transitions. cyclomatic complexity: 14584 Second operand has 13 states, 13 states have (on average 3.5384615384615383) internal successors, (46), 13 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:52,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:40:52,524 INFO L93 Difference]: Finished difference Result 32634 states and 60230 transitions. [2021-10-28 23:40:52,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2021-10-28 23:40:52,540 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 32634 states and 60230 transitions. [2021-10-28 23:40:52,685 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7091 [2021-10-28 23:40:52,983 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 32634 states to 32634 states and 60230 transitions. [2021-10-28 23:40:52,984 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32634 [2021-10-28 23:40:53,043 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32634 [2021-10-28 23:40:53,043 INFO L73 IsDeterministic]: Start isDeterministic. Operand 32634 states and 60230 transitions. [2021-10-28 23:40:53,079 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-28 23:40:53,079 INFO L681 BuchiCegarLoop]: Abstraction has 32634 states and 60230 transitions. [2021-10-28 23:40:53,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32634 states and 60230 transitions. [2021-10-28 23:40:53,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32634 to 27188. [2021-10-28 23:40:53,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27188 states, 27188 states have (on average 1.8619611593350007) internal successors, (50623), 27187 states have internal predecessors, (50623), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:53,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27188 states to 27188 states and 50623 transitions. [2021-10-28 23:40:53,804 INFO L704 BuchiCegarLoop]: Abstraction has 27188 states and 50623 transitions. [2021-10-28 23:40:53,804 INFO L587 BuchiCegarLoop]: Abstraction has 27188 states and 50623 transitions. [2021-10-28 23:40:53,804 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-10-28 23:40:53,804 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27188 states and 50623 transitions. [2021-10-28 23:40:53,898 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5549 [2021-10-28 23:40:53,898 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-28 23:40:53,898 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-28 23:40:53,910 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:53,910 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:53,910 INFO L791 eck$LassoCheckResult]: Stem: 99441#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 99442#L-1 havoc main_#res;havoc main_#t~ret174, main_~retValue_acc~29, main_~tmp~25;havoc main_~retValue_acc~29;havoc main_~tmp~25; 96124#L1415 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 96125#L1423 main_#t~ret174 := valid_product_#res;main_~tmp~25 := main_#t~ret174;havoc main_#t~ret174; 97348#L3392 assume 0 != main_~tmp~25; 95756#L3369 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 95757#L786 havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 100427#L2983 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 95130#L3008 bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 97486#L1064 assume 0 == initPersonOnFloor_~floor; 95802#L1065 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 94225#L1172-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 96045#L856 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 96046#L868-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 97812#L1640 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 94785#L1692 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 94786#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 98257#L604 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 98258#L1657-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 96717#L1678-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 98465#L608 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 96030#L648 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 100967#L793 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 100963#L820 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 100958#L2925 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 100955#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 100951#L1640-1 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 100949#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 100929#L2326 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 100920#L2462 assume !(0 != timeShift_~tmp___9~3); 100919#L2553 assume !(1 == ~doorState~0); 100918#L2553-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 100760#L793-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 100756#L820-3 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 100750#L2925-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 100747#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 100699#L1640-2 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 100695#L2205 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 100691#L2561 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 100682#L2249 assume !(1 == ~currentHeading~0); 98570#L2259 assume !(0 == ~currentFloorID~0); 98571#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 109528#L2265-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 106738#L673 assume !(-1 == ~expectedDirection~0); 106721#L685 assume !(1 == ~expectedDirection~0); 102025#L686 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 102024#L1640-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 102023#L1692-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 102022#L542-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 94195#L604-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 94196#L1657-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 94815#L1678-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 96014#L608-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 94297#L648-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 102019#L793-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 102008#L820-25 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 102007#L2925-3 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 101995#L2309-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 101989#L1640-5 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 101983#L2313-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 101981#L2326-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 101979#L2462-1 assume !(0 != timeShift_~tmp___9~3); 101978#L2553-3 assume !(1 == ~doorState~0); 101977#L2553-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 101893#L793-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 101888#L820-28 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 101887#L2925-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 101884#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 101838#L1640-6 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 101819#L2205-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 101811#L2561-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 101802#L2249-3 assume !(1 == ~currentHeading~0); 98876#L2259-9 assume !(0 == ~currentFloorID~0); 98878#L2259-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 109521#L2265-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 109410#L673-1 assume !(-1 == ~expectedDirection~0); 106724#L685-1 assume !(1 == ~expectedDirection~0); 100698#L686-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 100694#L1640-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 100690#L1692-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 100686#L542-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 96846#L604-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 96847#L1657-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 94293#L1678-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 97083#L608-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 94748#L648-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 101193#L793-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 101100#L820-50 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 101037#L2925-6 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 101029#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 101021#L1640-9 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 101015#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 101014#L2326-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 100827#L2462-2 assume !(0 != timeShift_~tmp___9~3); 100821#L2553-6 assume !(1 == ~doorState~0); 100819#L2553-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 100818#L793-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 100808#L820-53 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 100806#L2925-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 100701#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 100696#L1640-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 100693#L2205-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 100688#L2561-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 100684#L2249-6 assume !(1 == ~currentHeading~0); 100532#L2259-18 assume !(0 == ~currentFloorID~0); 98357#L2259-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 106832#L2265-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 106830#L673-2 assume !(-1 == ~expectedDirection~0); 106827#L685-2 assume !(1 == ~expectedDirection~0); 106825#L686-2 havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 106822#L2983-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 106818#L3008-1 bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 106817#L1064-1 assume 0 == initPersonOnFloor_~floor; 106811#L1065-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 106735#L1172-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 106733#L856-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 102173#L868-5 havoc cleanup_#t~ret168, cleanup_#t~ret169, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 102172#L1640-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 102171#L1692-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 102169#L542-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 99677#L604-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 99678#L1657-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 95642#L1678-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 97860#L608-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 97699#L648-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 101373#L793-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 101369#L820-75 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 101360#L2925-9 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 101348#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 101338#L1640-13 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 101268#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 101262#L2326-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 101259#L2462-3 assume !(0 != timeShift_~tmp___9~3); 101258#L2553-9 assume !(1 == ~doorState~0); 101257#L2553-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 101256#L793-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 101246#L820-78 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 101244#L2925-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 101194#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 101186#L1640-14 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 101181#L2205-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 101176#L2561-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 100671#L2249-9 assume !(1 == ~currentHeading~0); 98152#L2259-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 98153#L2259-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 111095#L2265-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 112722#L673-3 assume !(-1 == ~expectedDirection~0); 112719#L685-3 assume !(1 == ~expectedDirection~0); 111135#L686-3 cleanup_~i~3 := 0; 111134#L3201-2 [2021-10-28 23:40:53,911 INFO L793 eck$LassoCheckResult]: Loop: 111134#L3201-2 assume !false; 111101#L3202 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 109524#L3205 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 108701#L1511 cleanup_#t~ret168 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret168;havoc cleanup_#t~ret168; 108690#L3209 assume 1 != cleanup_~tmp___0~12; 108684#L3209-1 havoc isIdle_#res;havoc isIdle_#t~ret68, isIdle_~retValue_acc~15, isIdle_~tmp~8;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~8;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~7, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~7;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 106782#L793-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 106769#L820-100 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 106751#L1748 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 106734#L1812 isIdle_#t~ret68 := anyStopRequested_#res;isIdle_~tmp~8 := isIdle_#t~ret68;havoc isIdle_#t~ret68;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~8 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 106718#L1825 cleanup_#t~ret169 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret169;havoc cleanup_#t~ret169; 102650#L3221 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 102649#L1640-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 102648#L1692-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 101020#L542-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 100680#L543-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 100443#L1657-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 95308#L1678-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 97313#L547-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 94432#L648-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 102762#L793-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 102757#L820-105 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 102752#L2925-12 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 102739#L2309-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 102732#L1640-17 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 102721#L2313-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 102717#L2326-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 102713#L2462-4 assume !(0 != timeShift_~tmp___9~3); 102711#L2553-12 assume 1 == ~doorState~0;~doorState~0 := 0; 102707#L2553-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 102702#L793-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 102700#L820-108 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 102693#L2925-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 102694#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 106557#L1640-18 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 106558#L2205-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 106544#L2561-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 106546#L2249-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 115255#L1367-21 continueInDirection_#t~ret83 := isTopFloor_#res;continueInDirection_~tmp~11 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 115252#L2253-36 assume 0 != continueInDirection_~tmp~11;~currentHeading~0 := 0; 107721#L2259-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 100156#L2265-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 115243#L673-4 assume !(-1 == ~expectedDirection~0); 114938#L685-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 111138#L1692-14 __utac_acc__Specification3_spec__2_#t~ret61 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~6 := __utac_acc__Specification3_spec__2_#t~ret61;havoc __utac_acc__Specification3_spec__2_#t~ret61; 111139#L690-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6); 111136#L686-4 cleanup_~i~3 := 1 + cleanup_~i~3; 111134#L3201-2 [2021-10-28 23:40:53,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:53,912 INFO L85 PathProgramCache]: Analyzing trace with hash -1324255426, now seen corresponding path program 3 times [2021-10-28 23:40:53,912 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:53,913 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [384358903] [2021-10-28 23:40:53,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:53,913 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:54,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:54,171 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:54,171 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:54,171 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [384358903] [2021-10-28 23:40:54,172 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [384358903] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:54,172 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:54,172 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:40:54,172 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1745251872] [2021-10-28 23:40:54,173 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-28 23:40:54,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:54,174 INFO L85 PathProgramCache]: Analyzing trace with hash 585485988, now seen corresponding path program 1 times [2021-10-28 23:40:54,174 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:54,175 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1582629171] [2021-10-28 23:40:54,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:54,175 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:54,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:54,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:54,229 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:54,233 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1582629171] [2021-10-28 23:40:54,234 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1582629171] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:54,234 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:54,234 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:40:54,235 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1002426118] [2021-10-28 23:40:54,235 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-10-28 23:40:54,235 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:40:54,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 23:40:54,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 23:40:54,242 INFO L87 Difference]: Start difference. First operand 27188 states and 50623 transitions. cyclomatic complexity: 23436 Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:55,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:40:55,195 INFO L93 Difference]: Finished difference Result 53907 states and 100151 transitions. [2021-10-28 23:40:55,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 23:40:55,195 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53907 states and 100151 transitions. [2021-10-28 23:40:55,607 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19512 [2021-10-28 23:40:55,879 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53907 states to 53829 states and 100073 transitions. [2021-10-28 23:40:55,879 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53829 [2021-10-28 23:40:55,919 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53829 [2021-10-28 23:40:55,919 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53829 states and 100073 transitions. [2021-10-28 23:40:55,966 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-28 23:40:55,966 INFO L681 BuchiCegarLoop]: Abstraction has 53829 states and 100073 transitions. [2021-10-28 23:40:56,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53829 states and 100073 transitions. [2021-10-28 23:40:56,901 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53829 to 38089. [2021-10-28 23:40:56,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38089 states, 38089 states have (on average 1.8699099477539447) internal successors, (71223), 38088 states have internal predecessors, (71223), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:40:57,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38089 states to 38089 states and 71223 transitions. [2021-10-28 23:40:57,062 INFO L704 BuchiCegarLoop]: Abstraction has 38089 states and 71223 transitions. [2021-10-28 23:40:57,062 INFO L587 BuchiCegarLoop]: Abstraction has 38089 states and 71223 transitions. [2021-10-28 23:40:57,062 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-10-28 23:40:57,063 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38089 states and 71223 transitions. [2021-10-28 23:40:57,377 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8622 [2021-10-28 23:40:57,377 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-10-28 23:40:57,377 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-10-28 23:40:57,387 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:57,388 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:40:57,388 INFO L791 eck$LassoCheckResult]: Stem: 180488#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 180489#L-1 havoc main_#res;havoc main_#t~ret174, main_~retValue_acc~29, main_~tmp~25;havoc main_~retValue_acc~29;havoc main_~tmp~25; 177224#L1415 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 177225#L1423 main_#t~ret174 := valid_product_#res;main_~tmp~25 := main_#t~ret174;havoc main_#t~ret174; 178432#L3392 assume 0 != main_~tmp~25; 176857#L3369 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 176858#L786 havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 181429#L2983 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 176231#L3008 bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 178569#L1064 assume 0 == initPersonOnFloor_~floor; 176904#L1065 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 175331#L1172-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 177146#L856 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 177147#L868-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 178894#L1640 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 175889#L1692 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 175890#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 179332#L604 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 179333#L1657-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 177800#L1678-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 179529#L608 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 177131#L648 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 182986#L793 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 182982#L820 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 182977#L2925 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 182974#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 182970#L1640-1 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 182968#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 182965#L2326 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 182963#L2462 assume !(0 != timeShift_~tmp___9~3); 182962#L2553 assume !(1 == ~doorState~0); 182961#L2553-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 182959#L793-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 182955#L820-3 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 182950#L2925-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 182820#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 182816#L1640-2 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 182814#L2205 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 181624#L2561 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 180996#L2249 assume !(1 == ~currentHeading~0); 179637#L2259 assume !(0 == ~currentFloorID~0); 179638#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 183508#L2265-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 183505#L673 assume !(-1 == ~expectedDirection~0); 183502#L685 assume !(1 == ~expectedDirection~0); 183500#L686 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 183499#L1640-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 183498#L1692-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 183496#L542-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 175302#L604-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 175303#L1657-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 175918#L1678-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 177116#L608-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 175402#L648-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 182622#L793-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 182619#L820-25 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 182618#L2925-3 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 182617#L2309-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 182611#L1640-5 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 182593#L2313-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 182591#L2326-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 182589#L2462-1 assume !(0 != timeShift_~tmp___9~3); 182590#L2553-3 assume !(1 == ~doorState~0); 183491#L2553-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 183488#L793-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 183485#L820-28 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 183409#L2925-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 183363#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 183361#L1640-6 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 183360#L2205-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 183358#L2561-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 183357#L2249-3 assume !(1 == ~currentHeading~0); 179938#L2259-9 assume !(0 == ~currentFloorID~0); 179940#L2259-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 181888#L2265-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 181701#L673-1 assume !(-1 == ~expectedDirection~0); 181697#L685-1 assume !(1 == ~expectedDirection~0); 181645#L686-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 181640#L1640-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 181635#L1692-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 181631#L542-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 177930#L604-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 177931#L1657-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 175400#L1678-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 178170#L608-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 175852#L648-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 182473#L793-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 182468#L820-50 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 182467#L2925-6 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 182465#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 182466#L1640-9 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 182433#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 182432#L2326-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 182430#L2462-2 assume !(0 != timeShift_~tmp___9~3); 182429#L2553-6 assume !(1 == ~doorState~0); 182428#L2553-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 181818#L793-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 181808#L820-53 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 181806#L2925-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 181650#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 181643#L1640-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 181639#L2205-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 181633#L2561-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 181630#L2249-6 assume !(1 == ~currentHeading~0); 181516#L2259-18 assume !(0 == ~currentFloorID~0); 179431#L2259-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 183602#L2265-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 183600#L673-2 assume !(-1 == ~expectedDirection~0); 183597#L685-2 assume !(1 == ~expectedDirection~0); 183595#L686-2 havoc bobCall_#t~ret162, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~26;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~26; 183587#L2983-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~26 := 4;getOrigin_#res := getOrigin_~retValue_acc~26; 183582#L3008-1 bobCall_#t~ret162 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret162;havoc bobCall_#t~ret162;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 183581#L1064-1 assume 0 == initPersonOnFloor_~floor; 183565#L1065-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 183535#L1172-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 183534#L856-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 183529#L868-5 havoc cleanup_#t~ret168, cleanup_#t~ret169, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 183528#L1640-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 183527#L1692-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 183525#L542-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 180719#L604-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 180720#L1657-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 176745#L1678-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 178937#L608-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 178783#L648-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 183314#L793-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 183310#L820-75 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 183293#L2925-9 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 183287#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 183280#L1640-13 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 183276#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 183275#L2326-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 183273#L2462-3 assume !(0 != timeShift_~tmp___9~3); 183272#L2553-9 assume !(1 == ~doorState~0); 183271#L2553-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 183270#L793-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 182189#L820-78 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 181761#L2925-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 181758#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 181648#L1640-14 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 181642#L2205-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 181637#L2561-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 181628#L2249-9 assume !(1 == ~currentHeading~0); 179228#L2259-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 179229#L2259-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 202697#L2265-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 202687#L673-3 assume !(-1 == ~expectedDirection~0); 202686#L685-3 assume !(1 == ~expectedDirection~0); 202676#L686-3 cleanup_~i~3 := 0; 202677#L3201-2 [2021-10-28 23:40:57,389 INFO L793 eck$LassoCheckResult]: Loop: 202677#L3201-2 assume !false; 202672#L3202 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 202673#L3205 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 202668#L1511 cleanup_#t~ret168 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret168;havoc cleanup_#t~ret168; 202669#L3209 assume 1 != cleanup_~tmp___0~12; 202661#L3209-1 havoc isIdle_#res;havoc isIdle_#t~ret68, isIdle_~retValue_acc~15, isIdle_~tmp~8;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~8;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~7, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~7;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 202651#L793-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 202647#L820-100 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 202621#L1748 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 202581#L1812 isIdle_#t~ret68 := anyStopRequested_#res;isIdle_~tmp~8 := isIdle_#t~ret68;havoc isIdle_#t~ret68;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~8 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 201687#L1825 cleanup_#t~ret169 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret169;havoc cleanup_#t~ret169; 201686#L3221 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~15, timeShift_~tmp___0~10, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 201041#L1640-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 200770#L1692-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 196372#L542-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 196265#L543-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 181444#L1657-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 176412#L1678-48 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 178398#L547-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 175538#L648-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 204624#L793-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 204619#L820-105 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 204604#L2925-12 stopRequestedAtCurrentFloor_#t~ret86 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86; 204598#L2309-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~13;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 204596#L1640-17 stopRequestedAtCurrentFloor_#t~ret87 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87; 204586#L2313-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 204584#L2326-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 204582#L2462-4 assume !(0 != timeShift_~tmp___9~3); 204581#L2553-12 assume 1 == ~doorState~0;~doorState~0 := 0; 204580#L2553-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~10, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~10;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret160, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 204569#L793-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 204560#L820-108 isExecutiveFloorCalling_#t~ret160 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret160;havoc isExecutiveFloorCalling_#t~ret160;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 204558#L2925-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 204527#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 204258#L1640-18 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~10 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~10 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 204256#L2205-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 204257#L2561-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~11;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~11;~currentHeading~0 := continueInDirection_~dir; 204402#L2249-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 207200#L1367-21 continueInDirection_#t~ret83 := isTopFloor_#res;continueInDirection_~tmp~11 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 207197#L2253-36 assume !(0 != continueInDirection_~tmp~11); 207194#L2259-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 204246#L2265-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 204247#L673-4 assume !(-1 == ~expectedDirection~0); 204243#L685-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 204239#L1692-14 __utac_acc__Specification3_spec__2_#t~ret61 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~6 := __utac_acc__Specification3_spec__2_#t~ret61;havoc __utac_acc__Specification3_spec__2_#t~ret61; 204240#L690-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6); 202678#L686-4 cleanup_~i~3 := 1 + cleanup_~i~3; 202677#L3201-2 [2021-10-28 23:40:57,389 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:57,390 INFO L85 PathProgramCache]: Analyzing trace with hash -1324255426, now seen corresponding path program 4 times [2021-10-28 23:40:57,390 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:57,391 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [414492902] [2021-10-28 23:40:57,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:57,391 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:57,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:40:57,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:40:57,485 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:40:57,485 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [414492902] [2021-10-28 23:40:57,485 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [414492902] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:40:57,485 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:40:57,485 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:40:57,486 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1651945959] [2021-10-28 23:40:57,486 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-10-28 23:40:57,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:40:57,486 INFO L85 PathProgramCache]: Analyzing trace with hash -223860638, now seen corresponding path program 1 times [2021-10-28 23:40:57,487 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:40:57,487 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [359255967] [2021-10-28 23:40:57,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:40:57,487 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:40:57,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-10-28 23:40:57,503 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-10-28 23:40:57,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-10-28 23:40:57,574 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-10-28 23:40:59,687 INFO L210 LassoAnalysis]: Preferences: [2021-10-28 23:40:59,689 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-10-28 23:40:59,689 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-10-28 23:40:59,689 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-10-28 23:40:59,689 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-10-28 23:40:59,690 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:40:59,690 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-10-28 23:40:59,690 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-10-28 23:40:59,690 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product03.cil.c_Iteration5_Loop [2021-10-28 23:40:59,690 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-10-28 23:40:59,690 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-10-28 23:40:59,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,736 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,743 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,802 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,810 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,818 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,835 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,837 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,841 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,842 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,844 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,871 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,913 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,915 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,933 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,937 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,963 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,970 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,978 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,986 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:40:59,999 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:00,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:00,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:00,007 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:00,715 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-10-28 23:41:00,715 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-10-28 23:41:00,718 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:00,718 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:00,723 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:00,724 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-10-28 23:41:00,725 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:00,725 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:00,739 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-28 23:41:00,739 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret103=0} Honda state: {ULTIMATE.start_timeShift_#t~ret103=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-28 23:41:00,773 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:00,773 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:00,774 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:00,774 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:00,775 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-10-28 23:41:00,776 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:00,776 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:00,784 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-28 23:41:00,784 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-28 23:41:00,804 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-10-28 23:41:00,805 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:00,805 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:00,806 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:00,807 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-10-28 23:41:00,810 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:00,810 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:00,824 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-28 23:41:00,824 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-28 23:41:00,861 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:00,861 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:00,861 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:00,862 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:00,877 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:00,877 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:00,887 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-10-28 23:41:00,916 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-28 23:41:00,916 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-28 23:41:01,003 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:01,004 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:01,004 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:01,004 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:01,009 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-10-28 23:41:01,010 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:01,010 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:01,028 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-28 23:41:01,028 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-28 23:41:01,047 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:01,048 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:01,048 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:01,048 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:01,082 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-10-28 23:41:01,085 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:01,085 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:01,102 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-28 23:41:01,102 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-28 23:41:01,124 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:01,124 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:01,124 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:01,125 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:01,126 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-10-28 23:41:01,132 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:01,132 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:01,145 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-28 23:41:01,145 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-28 23:41:01,170 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2021-10-28 23:41:01,170 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:01,170 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:01,171 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:01,175 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-10-28 23:41:01,175 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:01,175 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:01,183 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-10-28 23:41:01,183 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret87=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret87=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-10-28 23:41:01,202 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2021-10-28 23:41:01,202 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:01,203 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:01,204 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:01,205 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-10-28 23:41:01,205 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-10-28 23:41:01,206 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:01,237 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2021-10-28 23:41:01,237 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:01,238 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:01,238 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:01,240 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-10-28 23:41:01,244 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-10-28 23:41:01,244 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-10-28 23:41:01,899 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-10-28 23:41:01,905 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:01,905 INFO L210 LassoAnalysis]: Preferences: [2021-10-28 23:41:01,905 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-10-28 23:41:01,905 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-10-28 23:41:01,905 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-10-28 23:41:01,906 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-10-28 23:41:01,906 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:01,906 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-10-28 23:41:01,906 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-10-28 23:41:01,906 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product03.cil.c_Iteration5_Loop [2021-10-28 23:41:01,906 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-10-28 23:41:01,906 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-10-28 23:41:01,912 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,918 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,920 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,925 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,926 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,928 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,933 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,942 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,977 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,978 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,986 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,988 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:01,999 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,008 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,015 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,042 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,047 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,049 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,051 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,067 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,071 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,072 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,091 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,106 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,110 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,122 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,126 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,131 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,133 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,145 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,147 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,149 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,150 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-10-28 23:41:02,911 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-10-28 23:41:02,916 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-10-28 23:41:02,917 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:02,918 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:02,918 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:02,922 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-10-28 23:41:02,923 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-28 23:41:02,932 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-28 23:41:02,932 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-28 23:41:02,933 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-28 23:41:02,933 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-28 23:41:02,933 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-28 23:41:02,935 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-28 23:41:02,935 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-28 23:41:02,944 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-28 23:41:02,979 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:02,979 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:02,979 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:02,980 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:02,992 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-28 23:41:03,001 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-28 23:41:03,001 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-28 23:41:03,001 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-28 23:41:03,002 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-28 23:41:03,002 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-28 23:41:03,002 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-28 23:41:03,003 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-28 23:41:03,004 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-10-28 23:41:03,020 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-28 23:41:03,051 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:03,051 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:03,052 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:03,052 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:03,058 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-28 23:41:03,060 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2021-10-28 23:41:03,067 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-28 23:41:03,067 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-28 23:41:03,067 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-28 23:41:03,067 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-28 23:41:03,067 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-28 23:41:03,068 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-28 23:41:03,068 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-28 23:41:03,088 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-28 23:41:03,121 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:03,122 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:03,122 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:03,123 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:03,128 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-28 23:41:03,137 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-28 23:41:03,137 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-28 23:41:03,137 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-28 23:41:03,138 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-28 23:41:03,138 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-28 23:41:03,139 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-28 23:41:03,139 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-28 23:41:03,141 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2021-10-28 23:41:03,152 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-28 23:41:03,186 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:03,187 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:03,187 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:03,188 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:03,190 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2021-10-28 23:41:03,190 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-28 23:41:03,199 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-28 23:41:03,199 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-28 23:41:03,199 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-28 23:41:03,200 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-28 23:41:03,200 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-28 23:41:03,201 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-28 23:41:03,201 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-28 23:41:03,216 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-28 23:41:03,250 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:03,250 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:03,250 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:03,251 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:03,261 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-28 23:41:03,270 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-28 23:41:03,270 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-28 23:41:03,270 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-28 23:41:03,270 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-28 23:41:03,271 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-28 23:41:03,271 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-28 23:41:03,271 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-28 23:41:03,273 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2021-10-28 23:41:03,284 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-28 23:41:03,320 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:03,320 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:03,320 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:03,321 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:03,328 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-28 23:41:03,338 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-28 23:41:03,338 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-28 23:41:03,338 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-28 23:41:03,338 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-28 23:41:03,338 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-28 23:41:03,340 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-28 23:41:03,340 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-28 23:41:03,344 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2021-10-28 23:41:03,360 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-10-28 23:41:03,394 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:03,395 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:03,395 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:03,396 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:03,400 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-10-28 23:41:03,409 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-10-28 23:41:03,410 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-10-28 23:41:03,410 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-10-28 23:41:03,410 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-10-28 23:41:03,410 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-10-28 23:41:03,412 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-10-28 23:41:03,412 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-10-28 23:41:03,416 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2021-10-28 23:41:03,420 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-10-28 23:41:03,448 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2021-10-28 23:41:03,449 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-10-28 23:41:03,450 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-10-28 23:41:03,450 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:41:03,468 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-10-28 23:41:03,474 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-10-28 23:41:03,474 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-10-28 23:41:03,474 INFO L513 LassoAnalysis]: Proved termination. [2021-10-28 23:41:03,474 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2021-10-28 23:41:03,500 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2021-10-28 23:41:03,508 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2021-10-28 23:41:03,510 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-10-28 23:41:03,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:41:03,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:41:03,763 INFO L263 TraceCheckSpWp]: Trace formula consists of 1177 conjuncts, 2 conjunts are in the unsatisfiable core [2021-10-28 23:41:03,771 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-28 23:41:04,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:41:04,383 INFO L263 TraceCheckSpWp]: Trace formula consists of 193 conjuncts, 5 conjunts are in the unsatisfiable core [2021-10-28 23:41:04,387 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-28 23:41:04,764 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:41:04,770 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2021-10-28 23:41:04,771 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 38089 states and 71223 transitions. cyclomatic complexity: 33135 Second operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:41:05,020 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Ended with exit code 0 [2021-10-28 23:41:05,528 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 38089 states and 71223 transitions. cyclomatic complexity: 33135. Second operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 46711 states and 87298 transitions. Complement of second has 8 states. [2021-10-28 23:41:05,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2021-10-28 23:41:05,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 39.2) internal successors, (196), 5 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:41:05,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 10978 transitions. [2021-10-28 23:41:05,547 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10978 transitions. Stem has 149 letters. Loop has 47 letters. [2021-10-28 23:41:05,551 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-28 23:41:05,551 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10978 transitions. Stem has 196 letters. Loop has 47 letters. [2021-10-28 23:41:05,555 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-28 23:41:05,555 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10978 transitions. Stem has 149 letters. Loop has 94 letters. [2021-10-28 23:41:05,556 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-10-28 23:41:05,556 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46711 states and 87298 transitions. [2021-10-28 23:41:05,984 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-28 23:41:05,984 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46711 states to 0 states and 0 transitions. [2021-10-28 23:41:05,984 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2021-10-28 23:41:05,984 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2021-10-28 23:41:05,985 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2021-10-28 23:41:05,985 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-28 23:41:05,985 INFO L681 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 23:41:05,985 INFO L704 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 23:41:05,985 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:41:05,986 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 23:41:05,987 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 23:41:05,988 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand has 4 states, 4 states have (on average 37.25) internal successors, (149), 4 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:41:05,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:41:05,988 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2021-10-28 23:41:05,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-28 23:41:05,989 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2021-10-28 23:41:05,989 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-28 23:41:05,989 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2021-10-28 23:41:05,989 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2021-10-28 23:41:05,989 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2021-10-28 23:41:05,989 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2021-10-28 23:41:05,989 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-10-28 23:41:05,990 INFO L681 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 23:41:05,990 INFO L704 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 23:41:05,990 INFO L587 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 23:41:05,990 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-10-28 23:41:05,990 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2021-10-28 23:41:05,990 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-10-28 23:41:05,990 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2021-10-28 23:41:05,996 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 28.10 11:41:05 BoogieIcfgContainer [2021-10-28 23:41:05,996 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2021-10-28 23:41:05,997 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-28 23:41:05,997 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-28 23:41:05,997 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-28 23:41:05,997 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 11:40:34" (3/4) ... [2021-10-28 23:41:06,000 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-10-28 23:41:06,000 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-28 23:41:06,004 INFO L168 Benchmark]: Toolchain (without parser) took 42367.14 ms. Allocated memory was 132.1 MB in the beginning and 4.7 GB in the end (delta: 4.6 GB). Free memory was 96.2 MB in the beginning and 3.9 GB in the end (delta: -3.8 GB). Peak memory consumption was 801.3 MB. Max. memory is 16.1 GB. [2021-10-28 23:41:06,004 INFO L168 Benchmark]: CDTParser took 0.24 ms. Allocated memory is still 92.3 MB. Free memory is still 46.9 MB. There was no memory consumed. Max. memory is 16.1 GB. [2021-10-28 23:41:06,005 INFO L168 Benchmark]: CACSL2BoogieTranslator took 876.40 ms. Allocated memory is still 132.1 MB. Free memory was 95.9 MB in the beginning and 79.6 MB in the end (delta: 16.3 MB). Peak memory consumption was 14.7 MB. Max. memory is 16.1 GB. [2021-10-28 23:41:06,005 INFO L168 Benchmark]: Boogie Procedure Inliner took 387.76 ms. Allocated memory is still 132.1 MB. Free memory was 79.6 MB in the beginning and 76.4 MB in the end (delta: 3.2 MB). Peak memory consumption was 57.2 MB. Max. memory is 16.1 GB. [2021-10-28 23:41:06,006 INFO L168 Benchmark]: Boogie Preprocessor took 499.05 ms. Allocated memory was 132.1 MB in the beginning and 234.9 MB in the end (delta: 102.8 MB). Free memory was 76.4 MB in the beginning and 149.4 MB in the end (delta: -73.0 MB). Peak memory consumption was 52.5 MB. Max. memory is 16.1 GB. [2021-10-28 23:41:06,006 INFO L168 Benchmark]: RCFGBuilder took 9194.56 ms. Allocated memory was 234.9 MB in the beginning and 425.7 MB in the end (delta: 190.8 MB). Free memory was 149.4 MB in the beginning and 195.8 MB in the end (delta: -46.4 MB). Peak memory consumption was 188.7 MB. Max. memory is 16.1 GB. [2021-10-28 23:41:06,007 INFO L168 Benchmark]: BuchiAutomizer took 31399.44 ms. Allocated memory was 425.7 MB in the beginning and 4.7 GB in the end (delta: 4.3 GB). Free memory was 195.8 MB in the beginning and 3.9 GB in the end (delta: -3.7 GB). Peak memory consumption was 606.2 MB. Max. memory is 16.1 GB. [2021-10-28 23:41:06,007 INFO L168 Benchmark]: Witness Printer took 3.73 ms. Allocated memory is still 4.7 GB. Free memory is still 3.9 GB. There was no memory consumed. Max. memory is 16.1 GB. [2021-10-28 23:41:06,011 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24 ms. Allocated memory is still 92.3 MB. Free memory is still 46.9 MB. There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 876.40 ms. Allocated memory is still 132.1 MB. Free memory was 95.9 MB in the beginning and 79.6 MB in the end (delta: 16.3 MB). Peak memory consumption was 14.7 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 387.76 ms. Allocated memory is still 132.1 MB. Free memory was 79.6 MB in the beginning and 76.4 MB in the end (delta: 3.2 MB). Peak memory consumption was 57.2 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 499.05 ms. Allocated memory was 132.1 MB in the beginning and 234.9 MB in the end (delta: 102.8 MB). Free memory was 76.4 MB in the beginning and 149.4 MB in the end (delta: -73.0 MB). Peak memory consumption was 52.5 MB. Max. memory is 16.1 GB. * RCFGBuilder took 9194.56 ms. Allocated memory was 234.9 MB in the beginning and 425.7 MB in the end (delta: 190.8 MB). Free memory was 149.4 MB in the beginning and 195.8 MB in the end (delta: -46.4 MB). Peak memory consumption was 188.7 MB. Max. memory is 16.1 GB. * BuchiAutomizer took 31399.44 ms. Allocated memory was 425.7 MB in the beginning and 4.7 GB in the end (delta: 4.3 GB). Free memory was 195.8 MB in the beginning and 3.9 GB in the end (delta: -3.7 GB). Peak memory consumption was 606.2 MB. Max. memory is 16.1 GB. * Witness Printer took 3.73 ms. Allocated memory is still 4.7 GB. Free memory is still 3.9 GB. There was no memory consumed. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function -1 * i + cleanupTimeShifts and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 13 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 31.3s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 7.7s. Construction of modules took 9.7s. Büchi inclusion checks took 7.8s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 2.5s AutomataMinimizationTime, 4 MinimizatonAttempts, 21922 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 2.0s Buchi closure took 0.1s. Biggest automaton had 38089 states and ocurred in iteration 4. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 75961 SDtfs, 208775 SDslu, 171341 SDs, 0 SdLazy, 13462 SolverSat, 1741 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 9.7s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital211 mio100 ax100 hnf100 lsp16 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq211 hnf87 smp100 dnf152 smp100 tf102 neg97 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 27ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 8 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.9s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! [2021-10-28 23:41:06,068 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa21c7c4-7ecd-4193-9e75-1827b8c194ad/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...