./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product03_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product03_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5a75409486974cd314d9e0dd4520cbff77d7bb7a ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 14:13:24,819 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 14:13:24,821 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 14:13:24,827 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 14:13:24,828 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 14:13:24,828 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 14:13:24,829 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 14:13:24,830 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 14:13:24,831 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 14:13:24,832 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 14:13:24,833 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 14:13:24,833 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 14:13:24,833 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 14:13:24,834 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 14:13:24,835 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 14:13:24,835 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 14:13:24,836 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 14:13:24,837 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 14:13:24,838 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 14:13:24,839 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 14:13:24,840 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 14:13:24,841 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 14:13:24,843 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 14:13:24,843 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 14:13:24,843 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 14:13:24,844 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 14:13:24,844 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 14:13:24,845 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 14:13:24,845 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 14:13:24,846 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 14:13:24,846 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 14:13:24,847 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 14:13:24,847 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 14:13:24,847 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 14:13:24,848 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 14:13:24,848 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 14:13:24,848 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-23 14:13:24,857 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 14:13:24,857 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 14:13:24,858 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 14:13:24,858 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 14:13:24,858 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 14:13:24,858 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-23 14:13:24,858 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-23 14:13:24,858 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-23 14:13:24,859 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-23 14:13:24,859 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-23 14:13:24,859 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-23 14:13:24,859 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 14:13:24,859 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 14:13:24,859 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-23 14:13:24,860 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 14:13:24,860 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 14:13:24,860 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 14:13:24,860 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-23 14:13:24,860 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-23 14:13:24,860 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-23 14:13:24,860 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 14:13:24,861 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 14:13:24,861 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-23 14:13:24,861 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 14:13:24,861 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-23 14:13:24,861 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 14:13:24,861 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 14:13:24,862 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-23 14:13:24,862 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 14:13:24,862 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 14:13:24,862 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-23 14:13:24,863 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-23 14:13:24,863 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5a75409486974cd314d9e0dd4520cbff77d7bb7a [2018-11-23 14:13:24,884 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 14:13:24,892 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 14:13:24,895 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 14:13:24,896 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 14:13:24,896 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 14:13:24,897 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product03_true-unreach-call_true-termination.cil.c [2018-11-23 14:13:24,931 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/data/426fe236f/a29127a662624eee90e5892071546aad/FLAGb109ae683 [2018-11-23 14:13:25,419 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 14:13:25,420 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/sv-benchmarks/c/product-lines/elevator_spec14_product03_true-unreach-call_true-termination.cil.c [2018-11-23 14:13:25,431 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/data/426fe236f/a29127a662624eee90e5892071546aad/FLAGb109ae683 [2018-11-23 14:13:25,920 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/data/426fe236f/a29127a662624eee90e5892071546aad [2018-11-23 14:13:25,922 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 14:13:25,923 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 14:13:25,924 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 14:13:25,924 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 14:13:25,926 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 14:13:25,926 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:13:25" (1/1) ... [2018-11-23 14:13:25,928 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@658711a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:25, skipping insertion in model container [2018-11-23 14:13:25,928 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:13:25" (1/1) ... [2018-11-23 14:13:25,934 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 14:13:25,976 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 14:13:26,384 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 14:13:26,394 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 14:13:26,479 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 14:13:26,508 INFO L195 MainTranslator]: Completed translation [2018-11-23 14:13:26,508 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26 WrapperNode [2018-11-23 14:13:26,508 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 14:13:26,509 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 14:13:26,509 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 14:13:26,509 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 14:13:26,514 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,535 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,680 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 14:13:26,680 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 14:13:26,680 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 14:13:26,680 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 14:13:26,686 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,686 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,705 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,706 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,755 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,812 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,834 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... [2018-11-23 14:13:26,857 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 14:13:26,857 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 14:13:26,857 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 14:13:26,857 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 14:13:26,858 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:13:26,904 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 14:13:26,904 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 14:13:26,904 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 14:13:26,904 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 14:13:32,321 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 14:13:32,321 INFO L280 CfgBuilder]: Removed 1143 assue(true) statements. [2018-11-23 14:13:32,322 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:13:32 BoogieIcfgContainer [2018-11-23 14:13:32,322 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 14:13:32,322 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-23 14:13:32,322 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-23 14:13:32,325 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-23 14:13:32,326 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-23 14:13:32,326 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 23.11 02:13:25" (1/3) ... [2018-11-23 14:13:32,327 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1dfc5dfb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 23.11 02:13:32, skipping insertion in model container [2018-11-23 14:13:32,327 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-23 14:13:32,327 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:13:26" (2/3) ... [2018-11-23 14:13:32,327 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1dfc5dfb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 23.11 02:13:32, skipping insertion in model container [2018-11-23 14:13:32,327 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-23 14:13:32,327 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:13:32" (3/3) ... [2018-11-23 14:13:32,329 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product03_true-unreach-call_true-termination.cil.c [2018-11-23 14:13:32,374 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 14:13:32,374 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-23 14:13:32,374 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-23 14:13:32,375 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-23 14:13:32,375 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 14:13:32,375 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 14:13:32,375 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-23 14:13:32,376 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 14:13:32,376 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-23 14:13:32,437 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5422 states. [2018-11-23 14:13:32,517 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1102 [2018-11-23 14:13:32,517 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:13:32,517 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:13:32,530 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:32,531 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:32,531 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-23 14:13:32,531 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5422 states. [2018-11-23 14:13:32,573 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1102 [2018-11-23 14:13:32,573 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:13:32,573 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:13:32,577 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:32,577 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:32,584 INFO L794 eck$LassoCheckResult]: Stem: 2788#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4078#L-1true havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2454#L1725true havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1899#L1733true main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 3841#L1323true assume 0 != main_~tmp~11; 437#L1297true havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4494#L85true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2798#L110true bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3874#L618true assume 0 == initPersonOnFloor_~floor; 4011#L619true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2820#L726-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2129#L410true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 39#L422-2true havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 776#L347true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2809#L374true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1162#L3221true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2444#L2606true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4295#L1937true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2082#L2610true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 301#L2623true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2539#L2758true assume !(0 != timeShift_~tmp___9~2); 3551#L2849true assume 1 == ~doorState~0;~doorState~0 := 0; 3554#L2849-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 754#L347-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2789#L374-3true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2376#L3221-1true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2603#L2489true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4300#L1937-1true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3241#L2502true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3081#L2857true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 896#L2546true assume !(1 == ~currentHeading~0); 3856#L2556true assume !(0 == ~currentFloorID~0); 3858#L2556-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5379#L2562-5true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4346#L347-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2614#L374-25true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2375#L3221-3true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1997#L941true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1998#L941-1true havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4348#L347-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2615#L374-26true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2380#L3221-4true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2445#L2606-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4270#L1937-4true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2083#L2610-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 282#L2623-1true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2540#L2758-1true assume !(0 != timeShift_~tmp___9~2); 3524#L2849-3true assume !(1 == ~doorState~0); 3537#L2849-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4338#L347-29true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2602#L374-29true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2378#L3221-5true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2604#L2489-2true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4275#L1937-5true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3226#L2502-2true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3084#L2857-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 898#L2546-3true assume !(1 == ~currentHeading~0); 4041#L2556-9true assume !(0 == ~currentFloorID~0); 4049#L2556-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5359#L2562-11true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4541#L347-51true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2575#L374-51true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2371#L3221-7true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1999#L941-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2000#L941-3true havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4543#L347-52true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2576#L374-52true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2370#L3221-8true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2449#L2606-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4245#L1937-8true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2086#L2610-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 285#L2623-2true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2536#L2758-2true assume !(0 != timeShift_~tmp___9~2); 3532#L2849-6true assume !(1 == ~doorState~0); 3503#L2849-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4519#L347-55true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2579#L374-55true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2373#L3221-9true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2611#L2489-4true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4250#L1937-9true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3228#L2502-4true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3083#L2857-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 893#L2546-6true assume !(1 == ~currentHeading~0); 4039#L2556-18true assume !(0 == ~currentFloorID~0); 4021#L2556-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5346#L2562-17true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4428#L347-77true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2669#L374-77true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2372#L3221-11true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1989#L941-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1990#L941-5true havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4446#L85-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2794#L110-1true bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3847#L618-1true assume 0 == initPersonOnFloor_~floor; 3989#L619-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2814#L726-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2106#L410-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 47#L422-5true havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4431#L347-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2672#L374-78true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2367#L3221-12true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2447#L2606-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4260#L1937-12true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2084#L2610-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 291#L2623-3true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2535#L2758-3true assume !(0 != timeShift_~tmp___9~2); 3509#L2849-9true assume !(1 == ~doorState~0); 3512#L2849-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4443#L347-81true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2678#L374-81true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2365#L3221-13true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2592#L2489-6true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4229#L1937-13true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3238#L2502-6true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3086#L2857-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 878#L2546-9true assume !(1 == ~currentHeading~0); 4010#L2556-27true assume !(0 == ~currentFloorID~0); 4013#L2556-29true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5329#L2562-23true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4150#L347-103true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2638#L374-103true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2369#L3221-15true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1991#L941-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1993#L941-7true cleanup_~i~2 := 0; 1042#L1129-2true [2018-11-23 14:13:32,586 INFO L796 eck$LassoCheckResult]: Loop: 1042#L1129-2true assume !false; 1012#L1130true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 908#L1133true assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1322#L1808true cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 885#L1137true assume 1 != cleanup_~tmp___0~3; 887#L1137-1true havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4152#L347-104true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2619#L374-104true anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2901#L2045true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4378#L2109true isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5368#L2122true cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 3656#L1149true assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4137#L347-109true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2529#L374-109true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2368#L3221-16true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2450#L2606-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4235#L1937-16true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2076#L2610-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 288#L2623-4true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2537#L2758-4true assume !(0 != timeShift_~tmp___9~2); 3521#L2849-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3397#L2849-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4144#L347-112true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2532#L374-112true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2359#L3221-17true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2598#L2489-8true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4239#L1937-17true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3205#L2502-8true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3088#L2857-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 886#L2546-12true assume !(1 == ~currentHeading~0); 3977#L2556-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3980#L2556-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5316#L2562-29true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4074#L347-134true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2488#L374-134true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2357#L3221-19true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1995#L941-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1985#L941-9true cleanup_~i~2 := 1 + cleanup_~i~2; 1042#L1129-2true [2018-11-23 14:13:32,592 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:13:32,593 INFO L82 PathProgramCache]: Analyzing trace with hash 191841279, now seen corresponding path program 1 times [2018-11-23 14:13:32,594 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:13:32,595 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:13:32,639 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:32,639 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:13:32,639 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:32,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:13:32,824 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:13:32,826 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:13:32,826 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:13:32,830 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:13:32,830 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:13:32,830 INFO L82 PathProgramCache]: Analyzing trace with hash 987232994, now seen corresponding path program 1 times [2018-11-23 14:13:32,830 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:13:32,830 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:13:32,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:32,831 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:13:32,832 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:32,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:13:32,909 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:13:32,909 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:13:32,909 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 14:13:32,910 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:13:32,924 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 14:13:32,924 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 14:13:32,925 INFO L87 Difference]: Start difference. First operand 5422 states. Second operand 7 states. [2018-11-23 14:13:38,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:13:38,517 INFO L93 Difference]: Finished difference Result 46131 states and 87103 transitions. [2018-11-23 14:13:38,517 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-23 14:13:38,519 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46131 states and 87103 transitions. [2018-11-23 14:13:38,759 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10061 [2018-11-23 14:13:38,935 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46131 states to 46059 states and 87019 transitions. [2018-11-23 14:13:38,936 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46059 [2018-11-23 14:13:38,977 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46059 [2018-11-23 14:13:38,977 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46059 states and 87019 transitions. [2018-11-23 14:13:39,043 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 14:13:39,044 INFO L705 BuchiCegarLoop]: Abstraction has 46059 states and 87019 transitions. [2018-11-23 14:13:39,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46059 states and 87019 transitions. [2018-11-23 14:13:39,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46059 to 15659. [2018-11-23 14:13:39,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 15659 states. [2018-11-23 14:13:39,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15659 states to 15659 states and 29560 transitions. [2018-11-23 14:13:39,449 INFO L728 BuchiCegarLoop]: Abstraction has 15659 states and 29560 transitions. [2018-11-23 14:13:39,449 INFO L608 BuchiCegarLoop]: Abstraction has 15659 states and 29560 transitions. [2018-11-23 14:13:39,449 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-23 14:13:39,449 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15659 states and 29560 transitions. [2018-11-23 14:13:39,498 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3207 [2018-11-23 14:13:39,498 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:13:39,498 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:13:39,500 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:39,501 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:39,501 INFO L794 eck$LassoCheckResult]: Stem: 55128#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 55129#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 54615#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 54148#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 54149#L1323 assume 0 != main_~tmp~11; 52394#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 52395#L85 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 55138#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 55139#L618 assume 0 == initPersonOnFloor_~floor; 56258#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 51902#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 54398#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 51694#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 51695#L347 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 52888#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57460#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 57459#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57457#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 57453#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 57454#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 62513#L2758 assume !(0 != timeShift_~tmp___9~2); 62514#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 66761#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 66760#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 66759#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 66758#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 66756#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 66757#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 66765#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 66763#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 66762#L2546 assume !(1 == ~currentHeading~0); 56240#L2556 assume !(0 == ~currentFloorID~0); 56241#L2556-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51644#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 56677#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 56678#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 61812#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 61808#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 57674#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 57672#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 57301#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57663#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 57324#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57321#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 57320#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54330#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 63373#L2758-1 assume !(0 != timeShift_~tmp___9~2); 63374#L2849-3 assume !(1 == ~doorState~0); 66865#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 66864#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 66863#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 66862#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 54862#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 54863#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 66861#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 66859#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 66860#L2546-3 assume !(1 == ~currentHeading~0); 56497#L2556-9 assume !(0 == ~currentFloorID~0); 56498#L2556-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51618#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 56721#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54819#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 54578#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 54246#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 51929#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 54248#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 56722#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57619#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 57331#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57325#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 57322#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54334#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 63843#L2758-2 assume !(0 != timeShift_~tmp___9~2); 63844#L2849-6 assume !(1 == ~doorState~0); 67006#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 67005#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 67004#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 67003#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 67001#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 56632#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 55542#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 55406#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 55407#L2546-6 assume !(1 == ~currentHeading~0); 56494#L2556-18 assume !(0 == ~currentFloorID~0); 56467#L2556-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51625#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 61457#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 57370#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 61454#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 61449#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 61446#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 61443#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 61437#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 61436#L618-1 assume 0 == initPersonOnFloor_~floor; 61403#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 61365#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 61360#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 57638#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 57631#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 57372#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57607#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 57540#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57474#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 57464#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54332#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 65915#L2758-3 assume !(0 != timeShift_~tmp___9~2); 65916#L2849-9 assume !(1 == ~doorState~0); 67184#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 67183#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 67182#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 67181#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 67179#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 56615#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 56616#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 67171#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 67172#L2546-9 assume !(1 == ~currentHeading~0); 56451#L2556-27 assume !(0 == ~currentFloorID~0); 56452#L2556-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51603#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 56573#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54917#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 54575#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 54236#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 51891#L941-7 cleanup_~i~2 := 0; 53115#L1129-2 [2018-11-23 14:13:39,502 INFO L796 eck$LassoCheckResult]: Loop: 53115#L1129-2 assume !false; 53114#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 53051#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 53052#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 53008#L1137 assume 1 != cleanup_~tmp___0~3; 53009#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 53013#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54884#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 54885#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 52033#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 56688#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 55890#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 55891#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54748#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 54749#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 59876#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 56620#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 56621#L2610-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54323#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 65583#L2758-4 assume !(0 != timeShift_~tmp___9~2); 65584#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 66921#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 66920#L347-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 66919#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 66918#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 66916#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 66917#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 66963#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 66962#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 66941#L2546-12 assume !(1 == ~currentHeading~0); 56398#L2556-36 assume !(0 == ~currentFloorID~0); 56399#L2556-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51974#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 56524#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54676#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 54562#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 54240#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 51907#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 53115#L1129-2 [2018-11-23 14:13:39,502 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:13:39,502 INFO L82 PathProgramCache]: Analyzing trace with hash 191841279, now seen corresponding path program 2 times [2018-11-23 14:13:39,502 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:13:39,502 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:13:39,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:39,511 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:13:39,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:39,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:13:39,577 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:13:39,577 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:13:39,577 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:13:39,578 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:13:39,578 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:13:39,578 INFO L82 PathProgramCache]: Analyzing trace with hash 177886368, now seen corresponding path program 1 times [2018-11-23 14:13:39,578 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:13:39,578 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:13:39,579 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:39,581 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:13:39,581 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:39,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:13:39,609 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:13:39,609 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:13:39,609 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:13:39,609 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:13:39,610 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 14:13:39,610 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 14:13:39,610 INFO L87 Difference]: Start difference. First operand 15659 states and 29560 transitions. cyclomatic complexity: 13903 Second operand 3 states. [2018-11-23 14:13:39,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:13:39,890 INFO L93 Difference]: Finished difference Result 28116 states and 53034 transitions. [2018-11-23 14:13:39,891 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 14:13:39,892 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28116 states and 53034 transitions. [2018-11-23 14:13:39,984 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6386 [2018-11-23 14:13:40,049 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28116 states to 28116 states and 53034 transitions. [2018-11-23 14:13:40,049 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28116 [2018-11-23 14:13:40,068 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28116 [2018-11-23 14:13:40,069 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28116 states and 53034 transitions. [2018-11-23 14:13:40,085 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 14:13:40,085 INFO L705 BuchiCegarLoop]: Abstraction has 28116 states and 53034 transitions. [2018-11-23 14:13:40,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28116 states and 53034 transitions. [2018-11-23 14:13:40,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28116 to 28084. [2018-11-23 14:13:40,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 28084 states. [2018-11-23 14:13:40,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28084 states to 28084 states and 52986 transitions. [2018-11-23 14:13:40,403 INFO L728 BuchiCegarLoop]: Abstraction has 28084 states and 52986 transitions. [2018-11-23 14:13:40,403 INFO L608 BuchiCegarLoop]: Abstraction has 28084 states and 52986 transitions. [2018-11-23 14:13:40,403 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-23 14:13:40,404 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28084 states and 52986 transitions. [2018-11-23 14:13:40,575 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6378 [2018-11-23 14:13:40,575 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:13:40,575 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:13:40,578 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:40,578 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:40,578 INFO L794 eck$LassoCheckResult]: Stem: 98891#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 98892#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 98394#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 97941#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 97942#L1323 assume 0 != main_~tmp~11; 96165#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 96166#L85 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 98902#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 98903#L618 assume 0 == initPersonOnFloor_~floor; 100033#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 95683#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 98191#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 95476#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 95477#L347 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 96657#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 97039#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 97040#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 98385#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 98124#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 95952#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 95953#L2758 assume !(0 != timeShift_~tmp___9~2); 98547#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 99557#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 96621#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 96622#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98373#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 98374#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 100425#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 99325#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 99326#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 96796#L2546 assume !(1 == ~currentHeading~0); 96797#L2556 assume !(0 == ~currentFloorID~0); 100016#L2556-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 99996#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 123462#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 104076#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 123461#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 123456#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 123454#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 123453#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 104061#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 102241#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 101543#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 101542#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 101540#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 101541#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 108130#L2758-1 assume !(0 != timeShift_~tmp___9~2); 108129#L2849-3 assume !(1 == ~doorState~0); 108128#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 108127#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 108126#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 108124#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 108121#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 108084#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 108078#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 108075#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 108074#L2546-3 assume !(1 == ~currentHeading~0); 102254#L2556-9 assume !(0 == ~currentFloorID~0); 100448#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 107341#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 107758#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 101546#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 107757#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 107752#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 107750#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 107749#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 101074#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 107746#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 107739#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 107737#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 102314#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 95927#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 95928#L2758-2 assume !(0 != timeShift_~tmp___9~2); 98540#L2849-6 assume !(1 == ~doorState~0); 99525#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 99526#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 98605#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98368#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 98369#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 98648#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 99312#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 99173#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 96790#L2546-6 assume !(1 == ~currentHeading~0); 96791#L2556-18 assume !(0 == ~currentFloorID~0); 100242#L2556-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 95407#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 100486#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 98751#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98367#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 98028#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 95663#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 98030#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 98897#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 98898#L618-1 assume 0 == initPersonOnFloor_~floor; 100007#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 95651#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 98920#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 113488#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 113487#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 102319#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 113485#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 113314#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 113313#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 113312#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 95939#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 95940#L2758-3 assume !(0 != timeShift_~tmp___9~2); 98539#L2849-9 assume !(1 == ~doorState~0); 99531#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 99533#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 98768#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98355#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 98356#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 98623#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 99322#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 99177#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 96771#L2546-9 assume !(1 == ~currentHeading~0); 96772#L2556-27 assume !(0 == ~currentFloorID~0); 100227#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100160#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 117476#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 102337#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 117475#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 117470#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 117468#L941-7 cleanup_~i~2 := 0; 117466#L1129-2 [2018-11-23 14:13:40,579 INFO L796 eck$LassoCheckResult]: Loop: 117466#L1129-2 assume !false; 117465#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 117464#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 117463#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 117462#L1137 assume 1 != cleanup_~tmp___0~3; 117461#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 117460#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 117459#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 117435#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 117429#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 117428#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 117427#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 117426#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 113792#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 117425#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 117424#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 117423#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 117422#L2610-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 95933#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 95934#L2758-4 assume !(0 != timeShift_~tmp___9~2); 98542#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 99449#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 99450#L347-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 98534#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98351#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 98352#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 98631#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 99293#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 99180#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 96779#L2546-12 assume !(1 == ~currentHeading~0); 96780#L2556-36 assume !(0 == ~currentFloorID~0); 100177#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100116#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 119464#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 113857#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 119463#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 117498#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 117467#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 117466#L1129-2 [2018-11-23 14:13:40,579 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:13:40,579 INFO L82 PathProgramCache]: Analyzing trace with hash 1234881215, now seen corresponding path program 1 times [2018-11-23 14:13:40,579 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:13:40,579 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:13:40,580 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:40,580 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:13:40,580 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:40,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:13:40,634 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:13:40,635 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:13:40,635 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:13:40,635 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:13:40,635 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:13:40,635 INFO L82 PathProgramCache]: Analyzing trace with hash 1952893730, now seen corresponding path program 1 times [2018-11-23 14:13:40,635 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:13:40,636 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:13:40,636 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:40,636 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:13:40,636 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:40,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:13:40,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:13:40,698 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:13:40,698 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 14:13:40,698 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:13:40,699 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 14:13:40,699 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-23 14:13:40,699 INFO L87 Difference]: Start difference. First operand 28084 states and 52986 transitions. cyclomatic complexity: 24904 Second operand 8 states. [2018-11-23 14:13:45,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:13:45,898 INFO L93 Difference]: Finished difference Result 271091 states and 514268 transitions. [2018-11-23 14:13:45,899 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-11-23 14:13:45,899 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 271091 states and 514268 transitions. [2018-11-23 14:13:46,970 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 78012 [2018-11-23 14:13:47,623 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 271091 states to 271091 states and 514268 transitions. [2018-11-23 14:13:47,623 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 271091 [2018-11-23 14:13:47,754 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 271091 [2018-11-23 14:13:47,754 INFO L73 IsDeterministic]: Start isDeterministic. Operand 271091 states and 514268 transitions. [2018-11-23 14:13:47,859 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 14:13:47,859 INFO L705 BuchiCegarLoop]: Abstraction has 271091 states and 514268 transitions. [2018-11-23 14:13:47,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271091 states and 514268 transitions. [2018-11-23 14:13:52,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271091 to 55990. [2018-11-23 14:13:52,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55990 states. [2018-11-23 14:13:52,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55990 states to 55990 states and 105611 transitions. [2018-11-23 14:13:52,819 INFO L728 BuchiCegarLoop]: Abstraction has 55990 states and 105611 transitions. [2018-11-23 14:13:52,819 INFO L608 BuchiCegarLoop]: Abstraction has 55990 states and 105611 transitions. [2018-11-23 14:13:52,819 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-23 14:13:52,819 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55990 states and 105611 transitions. [2018-11-23 14:13:52,926 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 12632 [2018-11-23 14:13:52,926 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:13:52,926 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:13:52,930 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:52,930 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:13:52,930 INFO L794 eck$LassoCheckResult]: Stem: 398381#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 398382#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 397811#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 397295#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 397296#L1323 assume 0 != main_~tmp~11; 395426#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 395427#L85 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 398394#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 398395#L618 assume 0 == initPersonOnFloor_~floor; 399624#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 394932#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 397565#L410 assume !(0 == callOnFloor_~floorID); 397380#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 394721#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 394722#L347 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 398407#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 398408#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 397798#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 397799#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 397491#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 397493#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 403779#L2758 assume !(0 != timeShift_~tmp___9~2); 403780#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 403856#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 403857#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 403854#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 403855#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 403851#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 403852#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 404692#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 398677#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 396083#L2546 assume !(1 == ~currentHeading~0); 396084#L2556 assume !(0 == ~currentFloorID~0); 399607#L2556-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399585#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 404627#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 400846#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 404622#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 404619#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 394951#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 406651#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 406649#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 406644#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 406645#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 406639#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 406640#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 416541#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 416534#L2758-1 assume !(0 != timeShift_~tmp___9~2); 416535#L2849-3 assume !(1 == ~doorState~0); 418366#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 418365#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 418364#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 418363#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 418361#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 418359#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 418357#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 418354#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 418355#L2546-3 assume !(1 == ~currentHeading~0); 415275#L2556-9 assume !(0 == ~currentFloorID~0); 400100#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 415480#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 400224#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 400225#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 397765#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 397766#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 397404#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 397405#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 398046#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 398047#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 397805#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 397807#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 403918#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 395181#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 395182#L2758-2 assume !(0 != timeShift_~tmp___9~2); 397972#L2849-6 assume !(1 == ~doorState~0); 399085#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 399086#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 398052#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 397769#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 397770#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 400036#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 398837#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 398679#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 396077#L2546-6 assume !(1 == ~currentHeading~0); 396078#L2556-18 assume !(0 == ~currentFloorID~0); 399843#L2556-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399819#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 406856#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 406848#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 406849#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 406842#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 406840#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 400181#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 398389#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 398390#L618-1 assume 0 == initPersonOnFloor_~floor; 399597#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 394900#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 398414#L410-2 assume !(0 == callOnFloor_~floorID); 406792#L413-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 432311#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 432310#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 422959#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 432309#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 432307#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 432308#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 432305#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 432306#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 432338#L2758-3 assume !(0 != timeShift_~tmp___9~2); 432337#L2849-9 assume !(1 == ~doorState~0); 432336#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 432335#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 432334#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 432333#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 432332#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 400014#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 398849#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 398684#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 396054#L2546-9 assume !(1 == ~currentHeading~0); 396055#L2556-27 assume !(0 == ~currentFloorID~0); 399826#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399759#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 400796#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 398153#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 398154#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 422535#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 422534#L941-7 cleanup_~i~2 := 0; 438773#L1129-2 [2018-11-23 14:13:52,931 INFO L796 eck$LassoCheckResult]: Loop: 438773#L1129-2 assume !false; 438774#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 438741#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 438742#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 422513#L1137 assume 1 != cleanup_~tmp___0~3; 422514#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 422503#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 422504#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 422500#L2045 assume !(0 != anyStopRequested_~tmp___3~0); 398066#L2049 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 395063#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 438001#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 438002#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 440560#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 436905#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 440547#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 440548#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 440536#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 431925#L2610-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 431926#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 448734#L2758-4 assume !(0 != timeShift_~tmp___9~2); 449591#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 450181#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 449953#L347-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 449954#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 449939#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 449940#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 400025#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 398816#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 398687#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 396063#L2546-12 assume !(1 == ~currentHeading~0); 396064#L2556-36 assume !(0 == ~currentFloorID~0); 399775#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399716#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 438812#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 422602#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 438808#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 438798#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 438797#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 438773#L1129-2 [2018-11-23 14:13:52,931 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:13:52,931 INFO L82 PathProgramCache]: Analyzing trace with hash -757646360, now seen corresponding path program 1 times [2018-11-23 14:13:52,931 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:13:52,931 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:13:52,932 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:52,932 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:13:52,932 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:52,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:13:52,995 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:13:52,995 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:13:52,995 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:13:52,995 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:13:52,996 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:13:52,996 INFO L82 PathProgramCache]: Analyzing trace with hash 1739424412, now seen corresponding path program 1 times [2018-11-23 14:13:52,996 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:13:52,996 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:13:52,997 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:52,997 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:13:52,997 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:13:53,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:13:53,040 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:13:53,040 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:13:53,040 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 14:13:53,041 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:13:53,041 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 14:13:53,041 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-23 14:13:53,041 INFO L87 Difference]: Start difference. First operand 55990 states and 105611 transitions. cyclomatic complexity: 49623 Second operand 8 states. [2018-11-23 14:14:01,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:14:01,492 INFO L93 Difference]: Finished difference Result 325618 states and 613807 transitions. [2018-11-23 14:14:01,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-11-23 14:14:01,492 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 325618 states and 613807 transitions. [2018-11-23 14:14:02,332 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 90182 [2018-11-23 14:14:03,023 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 325618 states to 325618 states and 613807 transitions. [2018-11-23 14:14:03,024 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 325618 [2018-11-23 14:14:03,183 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 325618 [2018-11-23 14:14:03,183 INFO L73 IsDeterministic]: Start isDeterministic. Operand 325618 states and 613807 transitions. [2018-11-23 14:14:03,305 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 14:14:03,305 INFO L705 BuchiCegarLoop]: Abstraction has 325618 states and 613807 transitions. [2018-11-23 14:14:03,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325618 states and 613807 transitions. [2018-11-23 14:14:04,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325618 to 55545. [2018-11-23 14:14:04,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55545 states. [2018-11-23 14:14:04,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55545 states to 55545 states and 104740 transitions. [2018-11-23 14:14:04,539 INFO L728 BuchiCegarLoop]: Abstraction has 55545 states and 104740 transitions. [2018-11-23 14:14:04,539 INFO L608 BuchiCegarLoop]: Abstraction has 55545 states and 104740 transitions. [2018-11-23 14:14:04,539 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-23 14:14:04,539 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55545 states and 104740 transitions. [2018-11-23 14:14:04,874 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12590 [2018-11-23 14:14:04,875 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:14:04,875 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:14:04,877 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:04,877 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:04,878 INFO L794 eck$LassoCheckResult]: Stem: 779974#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 779975#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 779420#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 778937#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 778938#L1323 assume 0 != main_~tmp~11; 777133#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 777134#L85 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 779986#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 779987#L618 assume 0 == initPersonOnFloor_~floor; 781208#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 776642#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 779207#L410 assume !(0 == callOnFloor_~floorID); 779017#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 776478#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 777633#L347 assume !(0 == isFloorCalling_~floorID); 777635#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 781337#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 782352#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 782353#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 781647#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 781648#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 786341#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 786339#L2758 assume !(0 != timeShift_~tmp___9~2); 786338#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 786268#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 783210#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 777596#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 784367#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 784365#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 784366#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 801175#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 801165#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 801158#L2546 assume !(1 == ~currentHeading~0); 801150#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 801142#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 799276#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 781683#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 781684#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 799274#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 799270#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 799264#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 781686#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 781687#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 800361#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 800360#L2606-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 800359#L347-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 800353#L374-28 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 800350#L2579-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 800349#L2591-3 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 800348#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 800342#L2758-1 assume !(0 != timeShift_~tmp___9~2); 780705#L2849-3 assume !(1 == ~doorState~0); 780706#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 780717#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 799241#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 799240#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 799238#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 799239#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 798956#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 798949#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 798933#L2546-3 assume !(1 == ~currentHeading~0); 798918#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 798908#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 789877#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 789878#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 789873#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 789874#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 789863#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 789862#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 781775#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 781776#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 797596#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 797595#L2606-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 797593#L347-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 797588#L374-54 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 797585#L2579-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 797584#L2591-5 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 797583#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 797581#L2758-2 assume !(0 != timeShift_~tmp___9~2); 797580#L2849-6 assume !(1 == ~doorState~0); 797578#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 797577#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 797575#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 797574#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 797572#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 797570#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 797562#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 797452#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 797373#L2546-6 assume !(1 == ~currentHeading~0); 797366#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 797358#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 782336#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 781736#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 779814#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 779389#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 779024#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 776617#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 779026#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 779981#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 779982#L618-1 assume 0 == initPersonOnFloor_~floor; 781179#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 776605#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 794380#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 783236#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 783237#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 783226#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 783227#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 783221#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 783223#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 783218#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 779133#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 787991#L2758-3 assume !(0 != timeShift_~tmp___9~2); 787992#L2849-9 assume !(1 == ~doorState~0); 796998#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 796997#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 796996#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 796995#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 796993#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 796991#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 790825#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 790800#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 790789#L2546-9 assume !(1 == ~currentHeading~0); 790790#L2556-27 assume !(0 == ~currentFloorID~0); 790760#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 784259#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 784260#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 784251#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 784252#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 784247#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 784248#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 784243#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 784244#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 784236#L941-7 cleanup_~i~2 := 0; 784235#L1129-2 [2018-11-23 14:14:04,879 INFO L796 eck$LassoCheckResult]: Loop: 784235#L1129-2 assume !false; 784226#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 784227#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 784218#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 784219#L1137 assume 1 != cleanup_~tmp___0~3; 784146#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 784147#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 784142#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 784143#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 784138#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 784139#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 784123#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 784124#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 784117#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 784118#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 784112#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 784114#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 784108#L2610-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 779124#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 790661#L2758-4 assume !(0 != timeShift_~tmp___9~2); 790662#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 821776#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 821775#L347-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 821774#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 821773#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 821771#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 821770#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 821769#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 821698#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 816594#L2546-12 assume !(1 == ~currentHeading~0); 816593#L2556-36 assume !(0 == ~currentFloorID~0); 815969#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 814631#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 814632#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 784278#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 784279#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 784274#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 784275#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 784268#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 784269#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 784234#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 784235#L1129-2 [2018-11-23 14:14:04,879 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:04,879 INFO L82 PathProgramCache]: Analyzing trace with hash 209417879, now seen corresponding path program 1 times [2018-11-23 14:14:04,880 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:04,881 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:04,881 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:04,881 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:04,881 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:04,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:04,944 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:04,944 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:04,944 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:14:04,944 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:14:04,944 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:04,944 INFO L82 PathProgramCache]: Analyzing trace with hash -964967420, now seen corresponding path program 1 times [2018-11-23 14:14:04,945 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:04,945 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:04,945 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:04,945 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:04,946 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:04,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 14:14:04,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 14:14:05,363 WARN L180 SmtUtils]: Spent 374.00 ms on a formula simplification. DAG size of input: 192 DAG size of output: 170 [2018-11-23 14:14:05,753 WARN L180 SmtUtils]: Spent 370.00 ms on a formula simplification. DAG size of input: 141 DAG size of output: 122 [2018-11-23 14:14:05,760 INFO L216 LassoAnalysis]: Preferences: [2018-11-23 14:14:05,761 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-23 14:14:05,761 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-23 14:14:05,761 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-23 14:14:05,761 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-23 14:14:05,761 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:05,761 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-23 14:14:05,761 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-23 14:14:05,762 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-23 14:14:05,762 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-23 14:14:05,762 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-23 14:14:05,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,791 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,817 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,833 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,841 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,860 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,894 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,902 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,912 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,918 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,920 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,921 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,922 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,926 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,928 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,929 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,930 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:05,976 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:06,345 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-23 14:14:06,346 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,357 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,357 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,363 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,363 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,379 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,379 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,381 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,381 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret6=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,404 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,404 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,407 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,407 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret103=0} Honda state: {ULTIMATE.start_timeShift_#t~ret103=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,424 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,424 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,428 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,428 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~23=0} Honda state: {ULTIMATE.start_timeShift_~tmp~23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,460 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,460 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,463 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,463 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret107=0} Honda state: {ULTIMATE.start_timeShift_#t~ret107=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,494 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,495 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,497 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,497 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret100=0} Honda state: {ULTIMATE.start_timeShift_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,513 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,513 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,516 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,516 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret83=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret83=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,533 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,534 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,535 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,536 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,551 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,551 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,554 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,554 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,570 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,570 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,572 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,572 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret99=0} Honda state: {ULTIMATE.start_timeShift_#t~ret99=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,590 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,590 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,592 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,592 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret62=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret62=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,608 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,609 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,611 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,611 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,626 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,626 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,630 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,630 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,645 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,646 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,648 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,648 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,664 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,664 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,666 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,666 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~2=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,682 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,682 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,684 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,684 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,700 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,700 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,703 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,703 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~25=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~25=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,729 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,729 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,732 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,732 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~tmp~16=1, ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~19=1} Honda state: {ULTIMATE.start_isIdle_~tmp~16=1, ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~19=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,747 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,747 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:06,749 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 14:14:06,750 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret7=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,768 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:14:06,768 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:06,789 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-23 14:14:06,789 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:14:09,335 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-23 14:14:09,337 INFO L216 LassoAnalysis]: Preferences: [2018-11-23 14:14:09,338 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-23 14:14:09,338 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-23 14:14:09,338 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-23 14:14:09,338 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-23 14:14:09,338 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:14:09,338 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-23 14:14:09,338 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-23 14:14:09,338 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-23 14:14:09,338 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-23 14:14:09,338 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-23 14:14:09,341 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,346 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,384 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,389 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,413 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,414 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,415 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,419 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,429 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,433 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,434 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,435 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,436 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,455 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,460 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,461 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,466 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,468 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,473 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,476 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,493 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,497 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,504 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,506 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,508 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,510 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,527 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,528 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,529 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,530 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,531 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,538 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,539 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,551 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,553 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,556 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,557 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,558 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:14:09,950 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-23 14:14:09,954 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-23 14:14:09,955 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,956 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,956 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,957 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,957 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,957 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,958 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,959 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,960 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,960 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,960 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,960 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,961 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,961 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,961 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,961 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,961 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,961 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,961 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,962 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,962 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,962 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,962 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,962 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,962 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,962 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,962 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,963 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,963 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,963 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,963 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,963 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,963 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,964 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,964 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,964 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,964 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,965 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,965 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,965 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,965 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,965 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,966 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,966 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,966 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,966 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,967 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,967 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,967 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,967 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,967 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,968 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,968 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,968 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,968 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,969 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,969 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,969 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,969 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,969 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,970 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,970 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,970 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,971 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,971 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,971 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,971 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,971 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,971 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,972 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,972 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,973 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,973 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,973 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,973 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,973 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,974 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,974 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,974 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,974 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,975 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,975 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,975 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,975 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,976 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,976 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,976 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,976 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,976 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,977 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,978 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,978 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,978 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,978 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,978 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,978 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,979 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,979 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,979 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,980 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,980 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,980 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,980 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,980 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,980 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,981 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,981 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,981 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,982 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,982 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,982 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,982 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,982 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,983 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,983 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,983 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,983 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,984 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,984 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,984 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,984 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,984 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,984 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,985 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,985 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,985 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,986 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,986 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,986 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,986 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,986 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,986 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,987 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,987 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:09,987 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:09,988 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:09,988 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:09,988 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:09,988 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:09,988 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:09,988 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:09,989 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:09,989 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:10,004 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:10,004 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:10,004 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:10,005 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:10,005 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:10,005 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:10,005 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:10,005 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:10,005 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:10,007 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:10,008 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:10,008 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:10,008 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:10,008 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:10,008 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:10,008 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:10,009 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:10,009 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:10,010 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:14:10,010 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:14:10,010 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:14:10,011 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:14:10,011 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:14:10,011 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:14:10,011 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:14:10,012 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:14:10,012 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:14:10,017 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-23 14:14:10,035 INFO L443 ModelExtractionUtils]: Simplification made 5 calls to the SMT solver. [2018-11-23 14:14:10,035 INFO L444 ModelExtractionUtils]: 8 out of 12 variables were initially zero. Simplification set additionally 2 variables to zero. [2018-11-23 14:14:10,037 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-23 14:14:10,037 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-23 14:14:10,038 INFO L518 LassoAnalysis]: Proved termination. [2018-11-23 14:14:10,038 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2018-11-23 14:14:10,039 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-23 14:14:10,164 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:10,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:10,308 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 14:14:10,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:10,355 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 14:14:10,523 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:10,527 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 8 loop predicates [2018-11-23 14:14:10,527 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 55545 states and 104740 transitions. cyclomatic complexity: 49201 Second operand 10 states. [2018-11-23 14:14:14,283 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 55545 states and 104740 transitions. cyclomatic complexity: 49201. Second operand 10 states. Result 187075 states and 351852 transitions. Complement of second has 27 states. [2018-11-23 14:14:14,283 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 14 states 1 stem states 12 non-accepting loop states 1 accepting loop states [2018-11-23 14:14:14,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2018-11-23 14:14:14,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 27891 transitions. [2018-11-23 14:14:14,299 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 27891 transitions. Stem has 133 letters. Loop has 41 letters. [2018-11-23 14:14:14,302 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 14:14:14,302 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 27891 transitions. Stem has 174 letters. Loop has 41 letters. [2018-11-23 14:14:14,308 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 14:14:14,308 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 27891 transitions. Stem has 133 letters. Loop has 82 letters. [2018-11-23 14:14:14,309 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 14:14:14,309 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 187075 states and 351852 transitions. [2018-11-23 14:14:14,873 INFO L131 ngComponentsAnalysis]: Automaton has 24 accepting balls. 66949 [2018-11-23 14:14:15,343 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 187075 states to 187075 states and 351852 transitions. [2018-11-23 14:14:15,343 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 121034 [2018-11-23 14:14:15,430 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 121378 [2018-11-23 14:14:15,431 INFO L73 IsDeterministic]: Start isDeterministic. Operand 187075 states and 351852 transitions. [2018-11-23 14:14:15,474 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:14:15,474 INFO L705 BuchiCegarLoop]: Abstraction has 187075 states and 351852 transitions. [2018-11-23 14:14:15,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187075 states and 351852 transitions. [2018-11-23 14:14:16,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187075 to 102084. [2018-11-23 14:14:16,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 102084 states. [2018-11-23 14:14:17,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102084 states to 102084 states and 192350 transitions. [2018-11-23 14:14:17,352 INFO L728 BuchiCegarLoop]: Abstraction has 102084 states and 192350 transitions. [2018-11-23 14:14:17,352 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 14:14:17,352 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 14:14:17,353 INFO L87 Difference]: Start difference. First operand 102084 states and 192350 transitions. Second operand 3 states. [2018-11-23 14:14:17,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:14:17,873 INFO L93 Difference]: Finished difference Result 173935 states and 327634 transitions. [2018-11-23 14:14:17,873 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 14:14:17,873 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 173935 states and 327634 transitions. [2018-11-23 14:14:18,360 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 64504 [2018-11-23 14:14:18,746 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 173935 states to 173935 states and 327634 transitions. [2018-11-23 14:14:18,746 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 126325 [2018-11-23 14:14:18,823 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 126325 [2018-11-23 14:14:18,823 INFO L73 IsDeterministic]: Start isDeterministic. Operand 173935 states and 327634 transitions. [2018-11-23 14:14:18,844 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:14:18,844 INFO L705 BuchiCegarLoop]: Abstraction has 173935 states and 327634 transitions. [2018-11-23 14:14:18,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173935 states and 327634 transitions. [2018-11-23 14:14:19,744 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173935 to 102084. [2018-11-23 14:14:19,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 102084 states. [2018-11-23 14:14:19,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102084 states to 102084 states and 192344 transitions. [2018-11-23 14:14:19,871 INFO L728 BuchiCegarLoop]: Abstraction has 102084 states and 192344 transitions. [2018-11-23 14:14:19,871 INFO L608 BuchiCegarLoop]: Abstraction has 102084 states and 192344 transitions. [2018-11-23 14:14:19,871 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-23 14:14:19,871 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 102084 states and 192344 transitions. [2018-11-23 14:14:20,056 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 32252 [2018-11-23 14:14:20,056 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:14:20,056 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:14:20,059 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:20,059 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:20,059 INFO L794 eck$LassoCheckResult]: Stem: 1300065#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1300066#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 1299373#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1298751#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 1298752#L1323 assume 0 != main_~tmp~11; 1296482#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1296483#L85 assume !(0 == getOrigin_~person); 1301532#L89 assume !(1 == getOrigin_~person); 1301341#L93 assume !(2 == getOrigin_~person); 1301342#L97 assume !(3 == getOrigin_~person); 1302632#L101 assume !(4 == getOrigin_~person); 1300166#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1300076#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1300077#L618 assume 0 == initPersonOnFloor_~floor; 1301492#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1295932#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1299085#L410 assume !(0 == callOnFloor_~floorID); 1298845#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1295679#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1295680#L347 assume !(0 == isFloorCalling_~floorID); 1297115#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1303638#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1303641#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1303632#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1303633#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1303615#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1303613#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1303611#L2758 assume !(0 != timeShift_~tmp___9~2); 1303610#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 1303609#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1303608#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1297074#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1299341#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1299342#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1299722#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1305507#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1305505#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1305506#L2546 assume !(1 == ~currentHeading~0); 1305503#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1302118#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1295614#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1302116#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1299739#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1299340#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1298866#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1295953#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1298868#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1299740#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1299349#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1299350#L2606-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1314764#L347-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1314757#L374-28 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1314753#L2579-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1314751#L2591-3 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1314749#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1314746#L2758-1 assume !(0 != timeShift_~tmp___9~2); 1300912#L2849-3 assume !(1 == ~doorState~0); 1300913#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1314731#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1308594#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1314727#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1314616#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1314597#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1314592#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1314276#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1313829#L2546-3 assume !(1 == ~currentHeading~0); 1297299#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1302105#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1301818#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1316540#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1310262#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1316536#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1316537#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1316511#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1316512#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1303116#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1316508#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1299369#L2606-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1299370#L347-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1299678#L374-54 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1299679#L2579-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1299796#L2591-5 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1296217#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1296218#L2758-2 assume !(0 != timeShift_~tmp___9~2); 1299589#L2849-6 assume !(1 == ~doorState~0); 1300893#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1300894#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1299680#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1299336#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1299337#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1299734#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1317065#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1316123#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1316125#L2546-6 assume !(1 == ~currentHeading~0); 1325199#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1320282#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1320281#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1327934#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1303044#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1327932#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1327928#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1327926#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1327925#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 1327919#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1326469#L618-1 assume 0 == initPersonOnFloor_~floor; 1325082#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1325047#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1325031#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1325019#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1325020#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1323582#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1323583#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1323570#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1323555#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1323556#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1323550#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1323551#L2758-3 assume !(0 != timeShift_~tmp___9~2); 1323546#L2849-9 assume !(1 == ~doorState~0); 1323537#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1323534#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1321011#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1321010#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1321009#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1320945#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1320946#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1320940#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1320942#L2546-9 assume !(1 == ~currentHeading~0); 1301768#L2556-27 assume !(0 == ~currentFloorID~0); 1301769#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1334188#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1350533#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1340454#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1350532#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1350531#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1350530#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1350529#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 1350527#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 1350525#L941-7 cleanup_~i~2 := 0; 1350522#L1129-2 assume !false; 1350523#L1130 [2018-11-23 14:14:20,060 INFO L796 eck$LassoCheckResult]: Loop: 1350523#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1381827#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1381825#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 1381823#L1137 assume 1 != cleanup_~tmp___0~3; 1381821#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1381819#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1381817#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 1381300#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1380907#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1380906#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 1380905#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1380904#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1368360#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1380902#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1380901#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1380845#L347-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1380840#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1380799#L2579-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1380798#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1380796#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1380794#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1380795#L2760-8 assume !(0 != ~persons_0~0); 1388665#L2760-9 assume !(0 != ~persons_1~0); 1388661#L2774-4 assume !(0 != ~persons_2~0); 1388636#L2788-4 assume !(0 != ~persons_3~0); 1388623#L2802-4 assume !(0 != ~persons_4~0); 1388611#L2816-4 assume !(0 != ~persons_5~0); 1388608#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1388467#L438-48 assume 0 == isPersonOnFloor_~floor; 1388438#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1388431#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 1388428#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 1388422#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1388419#L438-50 assume 0 == isPersonOnFloor_~floor; 1388408#L439-25 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1388382#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 1388369#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 1388367#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1388366#L438-52 assume 0 == isPersonOnFloor_~floor; 1388345#L439-26 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1388326#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 1388266#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1388260#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1388258#L438-54 assume 0 == isPersonOnFloor_~floor; 1388225#L439-27 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1388219#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 1388208#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1383267#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1383265#L438-56 assume 0 == isPersonOnFloor_~floor; 1383250#L439-28 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1383227#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 1383225#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1383218#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1383217#L438-58 assume 0 == isPersonOnFloor_~floor; 1383195#L439-29 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1383183#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 1382202#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1382175#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1382171#L382-68 assume !(0 == resetCallOnFloor_~floorID); 1382008#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 1382005#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1381934#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1380156#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1381871#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1368435#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1381867#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1381865#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1381863#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1381861#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 1381858#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 1381856#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 1380139#L1129-2 assume !false; 1350523#L1130 [2018-11-23 14:14:20,066 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:20,066 INFO L82 PathProgramCache]: Analyzing trace with hash 1524897971, now seen corresponding path program 1 times [2018-11-23 14:14:20,066 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:20,066 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:20,067 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:20,067 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:20,067 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:20,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:20,142 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:20,142 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:20,142 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:14:20,143 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:14:20,143 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:20,143 INFO L82 PathProgramCache]: Analyzing trace with hash 479347643, now seen corresponding path program 1 times [2018-11-23 14:14:20,143 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:20,143 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:20,144 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:20,144 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:20,144 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:20,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:20,193 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:20,194 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:20,194 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 14:14:20,194 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:14:20,194 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 14:14:20,194 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-23 14:14:20,194 INFO L87 Difference]: Start difference. First operand 102084 states and 192344 transitions. cyclomatic complexity: 90290 Second operand 8 states. [2018-11-23 14:14:25,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:14:25,022 INFO L93 Difference]: Finished difference Result 412473 states and 776371 transitions. [2018-11-23 14:14:25,022 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2018-11-23 14:14:25,022 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 412473 states and 776371 transitions. [2018-11-23 14:14:26,205 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 122223 [2018-11-23 14:14:27,172 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 412473 states to 412473 states and 776371 transitions. [2018-11-23 14:14:27,173 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 295595 [2018-11-23 14:14:27,351 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 295595 [2018-11-23 14:14:27,351 INFO L73 IsDeterministic]: Start isDeterministic. Operand 412473 states and 776371 transitions. [2018-11-23 14:14:27,426 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:14:27,426 INFO L705 BuchiCegarLoop]: Abstraction has 412473 states and 776371 transitions. [2018-11-23 14:14:27,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 412473 states and 776371 transitions. [2018-11-23 14:14:34,071 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 412473 to 101664. [2018-11-23 14:14:34,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 101664 states. [2018-11-23 14:14:34,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101664 states to 101664 states and 191560 transitions. [2018-11-23 14:14:34,185 INFO L728 BuchiCegarLoop]: Abstraction has 101664 states and 191560 transitions. [2018-11-23 14:14:34,185 INFO L608 BuchiCegarLoop]: Abstraction has 101664 states and 191560 transitions. [2018-11-23 14:14:34,185 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-23 14:14:34,185 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 101664 states and 191560 transitions. [2018-11-23 14:14:34,369 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 32102 [2018-11-23 14:14:34,369 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:14:34,370 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:14:34,372 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:34,372 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:34,372 INFO L794 eck$LassoCheckResult]: Stem: 1814740#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1814741#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 1814031#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1813399#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 1813400#L1323 assume 0 != main_~tmp~11; 1811125#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1811126#L85 assume !(0 == getOrigin_~person); 1816241#L89 assume !(1 == getOrigin_~person); 1816055#L93 assume !(2 == getOrigin_~person); 1816056#L97 assume !(3 == getOrigin_~person); 1817388#L101 assume !(4 == getOrigin_~person); 1814850#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1814754#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1814755#L618 assume 0 == initPersonOnFloor_~floor; 1816204#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1810566#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1813735#L410 assume !(0 == callOnFloor_~floorID); 1813495#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1810365#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1811757#L347 assume !(0 == isFloorCalling_~floorID); 1811759#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1816369#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1817719#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1817720#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1817711#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1817712#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1820610#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1820537#L2758 assume !(0 != timeShift_~tmp___9~2); 1820534#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 1820533#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1817728#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1814742#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1814743#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1814397#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1814398#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1828342#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1828331#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1828332#L2546 assume !(1 == ~currentHeading~0); 1838338#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1816854#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1810245#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1817707#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1814418#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1814419#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1813517#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1810587#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1816855#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1816856#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1831449#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1831448#L2606-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1831447#L347-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1831441#L374-28 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1831414#L2579-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1831413#L2591-3 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1831412#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1831404#L2758-1 assume !(0 != timeShift_~tmp___9~2); 1830915#L2849-3 assume !(1 == ~doorState~0); 1815643#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1815644#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1814396#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1813994#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1813995#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1814400#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1830969#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1830958#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1830948#L2546-3 assume !(1 == ~currentHeading~0); 1830940#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1830934#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1830925#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1816976#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1816977#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1813981#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1813982#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1813523#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1813524#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1814347#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1814348#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1814026#L2606-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1814027#L347-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1830801#L374-54 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1830802#L2579-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1836621#L2591-5 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1833749#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1833750#L2758-2 assume !(0 != timeShift_~tmp___9~2); 1833773#L2849-6 assume !(1 == ~doorState~0); 1833774#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1833770#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1818837#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1833766#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1833767#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1836619#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1836744#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1836742#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1836741#L2546-6 assume !(1 == ~currentHeading~0); 1835222#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1833103#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1833097#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1848155#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1842586#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1848154#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1848151#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1848149#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1830895#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 1830890#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1816173#L618-1 assume 0 == initPersonOnFloor_~floor; 1816174#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1830846#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1830847#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1845888#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1818562#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1818563#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1818546#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1818547#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1818534#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1818535#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1841588#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1841589#L2758-3 assume !(0 != timeShift_~tmp___9~2); 1845886#L2849-9 assume !(1 == ~doorState~0); 1845885#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1845884#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1845883#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1845882#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1845880#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1845878#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1845877#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1845876#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1842413#L2546-9 assume !(1 == ~currentHeading~0); 1842414#L2556-27 assume !(0 == ~currentFloorID~0); 1844843#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1844837#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1844838#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1844831#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1844832#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1844827#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1844828#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1844823#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 1844824#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 1844815#L941-7 cleanup_~i~2 := 0; 1844816#L1129-2 assume !false; 1858624#L1130 [2018-11-23 14:14:34,373 INFO L796 eck$LassoCheckResult]: Loop: 1858624#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1868656#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1868655#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 1868654#L1137 assume 1 != cleanup_~tmp___0~3; 1868651#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1868650#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1868649#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 1868648#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1868647#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1868646#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 1868645#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1868616#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1868615#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1868614#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1868613#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1868612#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1868610#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1868607#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1868608#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1870678#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1870677#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1870676#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1870674#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1870658#L2760-8 assume !(0 != ~persons_0~0); 1870641#L2760-9 assume !(0 != ~persons_1~0); 1870578#L2774-4 assume !(0 != ~persons_2~0); 1870569#L2788-4 assume !(0 != ~persons_3~0); 1870558#L2802-4 assume !(0 != ~persons_4~0); 1870538#L2816-4 assume !(0 != ~persons_5~0); 1870535#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870533#L438-48 assume 0 == isPersonOnFloor_~floor; 1870471#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870462#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 1870446#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 1870434#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870432#L438-50 assume 0 == isPersonOnFloor_~floor; 1870416#L439-25 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870390#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 1870380#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 1870347#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870326#L438-52 assume 0 == isPersonOnFloor_~floor; 1870306#L439-26 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870254#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 1870249#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1870225#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870223#L438-54 assume 0 == isPersonOnFloor_~floor; 1870159#L439-27 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870151#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 1870142#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1870137#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870130#L438-56 assume 0 == isPersonOnFloor_~floor; 1870061#L439-28 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870038#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 1870036#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1870029#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870028#L438-58 assume 0 == isPersonOnFloor_~floor; 1869999#L439-29 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1869986#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 1869981#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1869977#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1869975#L382-68 assume !(0 == resetCallOnFloor_~floorID); 1869972#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 1869970#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1869966#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1869960#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1868667#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1868666#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1868665#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1868664#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1868663#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1868662#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 1868660#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 1868658#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 1868657#L1129-2 assume !false; 1858624#L1130 [2018-11-23 14:14:34,379 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:34,379 INFO L82 PathProgramCache]: Analyzing trace with hash 1524897971, now seen corresponding path program 2 times [2018-11-23 14:14:34,379 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:34,380 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:34,380 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:34,380 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:34,380 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:34,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:34,477 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:34,478 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:34,478 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:14:34,478 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:14:34,478 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:34,478 INFO L82 PathProgramCache]: Analyzing trace with hash -1975581597, now seen corresponding path program 1 times [2018-11-23 14:14:34,478 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:34,479 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:34,486 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:34,486 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:14:34,486 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:34,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:34,549 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:34,549 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:34,549 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:14:34,550 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:14:34,550 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 14:14:34,550 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 14:14:34,550 INFO L87 Difference]: Start difference. First operand 101664 states and 191560 transitions. cyclomatic complexity: 89926 Second operand 6 states. [2018-11-23 14:14:39,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:14:39,488 INFO L93 Difference]: Finished difference Result 277987 states and 516678 transitions. [2018-11-23 14:14:39,488 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 14:14:39,489 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 277987 states and 516678 transitions. [2018-11-23 14:14:40,701 INFO L131 ngComponentsAnalysis]: Automaton has 32 accepting balls. 81808 [2018-11-23 14:14:41,262 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 277987 states to 277987 states and 516678 transitions. [2018-11-23 14:14:41,262 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 210534 [2018-11-23 14:14:41,385 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 210534 [2018-11-23 14:14:41,386 INFO L73 IsDeterministic]: Start isDeterministic. Operand 277987 states and 516678 transitions. [2018-11-23 14:14:41,386 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:14:41,386 INFO L705 BuchiCegarLoop]: Abstraction has 277987 states and 516678 transitions. [2018-11-23 14:14:41,509 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277987 states and 516678 transitions. [2018-11-23 14:14:42,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277987 to 101934. [2018-11-23 14:14:42,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 101934 states. [2018-11-23 14:14:42,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101934 states to 101934 states and 189405 transitions. [2018-11-23 14:14:42,662 INFO L728 BuchiCegarLoop]: Abstraction has 101934 states and 189405 transitions. [2018-11-23 14:14:42,662 INFO L608 BuchiCegarLoop]: Abstraction has 101934 states and 189405 transitions. [2018-11-23 14:14:42,662 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-23 14:14:42,662 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 101934 states and 189405 transitions. [2018-11-23 14:14:42,845 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 32196 [2018-11-23 14:14:42,846 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:14:42,846 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:14:42,847 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:42,847 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:42,847 INFO L794 eck$LassoCheckResult]: Stem: 2194365#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2194366#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2193702#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2193086#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 2193087#L1323 assume 0 != main_~tmp~11; 2190802#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2190803#L85 assume !(0 == getOrigin_~person); 2195898#L89 assume !(1 == getOrigin_~person); 2195704#L93 assume !(2 == getOrigin_~person); 2195705#L97 assume !(3 == getOrigin_~person); 2197032#L101 assume !(4 == getOrigin_~person); 2194472#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2194379#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2194380#L618 assume 0 == initPersonOnFloor_~floor; 2195858#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2190245#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2193421#L410 assume !(0 == callOnFloor_~floorID); 2193180#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2190040#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2191437#L347 assume !(0 == isFloorCalling_~floorID); 2191439#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2198244#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2198243#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2198242#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2198241#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2198221#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2198219#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2198217#L2758 assume !(0 != timeShift_~tmp___9~2); 2198216#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 2198215#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2198213#L347-3 assume !(0 == isFloorCalling_~floorID); 2198211#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2198208#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2198207#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2198206#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2198205#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2198204#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2198203#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2197670#L2546 assume !(1 == ~currentHeading~0); 2197671#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2197646#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2197641#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2197638#L347-25 assume !(0 == isFloorCalling_~floorID); 2196408#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2195543#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2198102#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2197995#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2197994#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2197639#L347-26 assume !(0 == isFloorCalling_~floorID); 2197640#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2203343#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2203341#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2203337#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2203338#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2203305#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2203303#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2203301#L2758-1 assume !(0 != timeShift_~tmp___9~2); 2203300#L2849-3 assume !(1 == ~doorState~0); 2203299#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2203297#L347-29 assume !(0 == isFloorCalling_~floorID); 2203295#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2203288#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2203286#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2203284#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2203129#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2203128#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2203125#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2203126#L2546-3 assume !(1 == ~currentHeading~0); 2203005#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2202464#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2202455#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2202448#L347-51 assume !(0 == isFloorCalling_~floorID); 2202449#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2202440#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2202437#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2202431#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2202430#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2202419#L347-52 assume !(0 == isFloorCalling_~floorID); 2196349#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2195395#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2204867#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2204868#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2212829#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2212812#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2212811#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2212809#L2758-2 assume !(0 != timeShift_~tmp___9~2); 2212808#L2849-6 assume !(1 == ~doorState~0); 2212807#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2212806#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2193994#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2193995#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2217327#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2217307#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2217306#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2217305#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2191609#L2546-6 assume !(1 == ~currentHeading~0); 2191610#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2196455#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2214533#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2224330#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2221294#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2224329#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2204598#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2204595#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2204596#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2204586#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2204587#L618-1 assume 0 == initPersonOnFloor_~floor; 2224150#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2204544#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2204545#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2202412#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2202413#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2200885#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2200886#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2200879#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2200880#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2200813#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2193321#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2223835#L2758-3 assume !(0 != timeShift_~tmp___9~2); 2223837#L2849-9 assume !(1 == ~doorState~0); 2195266#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2195267#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2194204#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2193648#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2193649#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2194019#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2233437#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2233435#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2233434#L2546-9 assume !(1 == ~currentHeading~0); 2228012#L2556-27 assume !(0 == ~currentFloorID~0); 2233297#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2233288#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2242574#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2230682#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2242573#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2242572#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2242571#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2242570#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2242568#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2242565#L941-7 cleanup_~i~2 := 0; 2242562#L1129-2 assume !false; 2242563#L1130 [2018-11-23 14:14:42,847 INFO L796 eck$LassoCheckResult]: Loop: 2242563#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2252800#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2252794#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 2252791#L1137 assume 1 != cleanup_~tmp___0~3; 2252783#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2252780#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2252773#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2252645#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2252641#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2252631#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 2252558#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2252553#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2246572#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2252545#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2252544#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2252543#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2252516#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2252515#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2252514#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 2252513#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 2252506#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2254391#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2254390#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2252502#L2760-8 assume !(0 != ~persons_0~0); 2254363#L2760-9 assume !(0 != ~persons_1~0); 2254353#L2774-4 assume !(0 != ~persons_2~0); 2254340#L2788-4 assume !(0 != ~persons_3~0); 2254221#L2802-4 assume !(0 != ~persons_4~0); 2254171#L2816-4 assume !(0 != ~persons_5~0); 2254153#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2254148#L438-48 assume 0 == isPersonOnFloor_~floor; 2254123#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2254079#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 2254074#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 2253250#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2253248#L438-50 assume 0 == isPersonOnFloor_~floor; 2253249#L439-25 assume !(0 == isPersonOnFloor_~person); 2253230#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2253206#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 2253193#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 2253191#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2253189#L438-52 assume 0 == isPersonOnFloor_~floor; 2253190#L439-26 assume !(0 == isPersonOnFloor_~person); 2253167#L443-26 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2253154#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 2253138#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2253132#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2253130#L438-54 assume 0 == isPersonOnFloor_~floor; 2253131#L439-27 assume !(0 == isPersonOnFloor_~person); 2253094#L443-27 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2253088#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 2253077#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2253073#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2253072#L438-56 assume 0 == isPersonOnFloor_~floor; 2253070#L439-28 assume !(0 == isPersonOnFloor_~person); 2252972#L443-28 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2252940#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 2252936#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2252929#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2252927#L438-58 assume 0 == isPersonOnFloor_~floor; 2252928#L439-29 assume !(0 == isPersonOnFloor_~person); 2252898#L443-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2252886#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 2252881#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2252877#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2252875#L382-68 assume !(0 == resetCallOnFloor_~floorID); 2252872#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2252870#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2252866#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2252859#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2252857#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2247324#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2252855#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2252853#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2252851#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2252849#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2252844#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2252838#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 2252805#L1129-2 assume !false; 2242563#L1130 [2018-11-23 14:14:42,852 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:42,852 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 1 times [2018-11-23 14:14:42,852 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:42,852 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:42,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:42,853 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:42,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:42,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:42,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:42,926 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:42,926 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:14:42,926 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:14:42,926 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:42,927 INFO L82 PathProgramCache]: Analyzing trace with hash 1240642743, now seen corresponding path program 1 times [2018-11-23 14:14:42,927 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:42,927 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:42,927 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:42,927 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:42,928 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:42,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:42,948 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:42,948 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:42,948 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:14:42,949 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:14:42,949 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 14:14:42,949 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 14:14:42,949 INFO L87 Difference]: Start difference. First operand 101934 states and 189405 transitions. cyclomatic complexity: 87501 Second operand 3 states. [2018-11-23 14:14:44,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:14:44,464 INFO L93 Difference]: Finished difference Result 149950 states and 276132 transitions. [2018-11-23 14:14:44,464 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 14:14:44,464 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 149950 states and 276132 transitions. [2018-11-23 14:14:44,832 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 44378 [2018-11-23 14:14:45,130 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 149950 states to 149950 states and 276132 transitions. [2018-11-23 14:14:45,130 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 113703 [2018-11-23 14:14:45,188 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 113703 [2018-11-23 14:14:45,188 INFO L73 IsDeterministic]: Start isDeterministic. Operand 149950 states and 276132 transitions. [2018-11-23 14:14:45,192 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:14:45,192 INFO L705 BuchiCegarLoop]: Abstraction has 149950 states and 276132 transitions. [2018-11-23 14:14:45,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149950 states and 276132 transitions. [2018-11-23 14:14:45,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149950 to 101934. [2018-11-23 14:14:45,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 101934 states. [2018-11-23 14:14:46,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101934 states to 101934 states and 187465 transitions. [2018-11-23 14:14:46,094 INFO L728 BuchiCegarLoop]: Abstraction has 101934 states and 187465 transitions. [2018-11-23 14:14:46,094 INFO L608 BuchiCegarLoop]: Abstraction has 101934 states and 187465 transitions. [2018-11-23 14:14:46,094 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-23 14:14:46,094 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 101934 states and 187465 transitions. [2018-11-23 14:14:46,277 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 32196 [2018-11-23 14:14:46,277 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:14:46,277 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:14:46,278 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:46,278 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:46,279 INFO L794 eck$LassoCheckResult]: Stem: 2446338#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2446339#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2445652#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2445005#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 2445006#L1323 assume 0 != main_~tmp~11; 2442665#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2442666#L85 assume !(0 == getOrigin_~person); 2447872#L89 assume !(1 == getOrigin_~person); 2447682#L93 assume !(2 == getOrigin_~person); 2447683#L97 assume !(3 == getOrigin_~person); 2449015#L101 assume !(4 == getOrigin_~person); 2446445#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2446352#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2446353#L618 assume 0 == initPersonOnFloor_~floor; 2447835#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2442125#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2445348#L410 assume !(0 == callOnFloor_~floorID); 2445100#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2441934#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2443327#L347 assume !(0 == isFloorCalling_~floorID); 2443329#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2451699#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2451702#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2451693#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2451694#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2451675#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2451673#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2451671#L2758 assume !(0 != timeShift_~tmp___9~2); 2451670#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 2451669#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2451667#L347-3 assume !(0 == isFloorCalling_~floorID); 2448247#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2448046#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2449385#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2449381#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2449382#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2451399#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2451397#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2451396#L2546 assume !(1 == ~currentHeading~0); 2451395#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2449644#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2449642#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2449630#L347-25 assume !(0 == isFloorCalling_~floorID); 2449631#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2450564#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2450565#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2450555#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2450554#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2449632#L347-26 assume !(0 == isFloorCalling_~floorID); 2449633#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2460841#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2449622#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2449619#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2449615#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2449616#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2460358#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2460356#L2758-1 assume !(0 != timeShift_~tmp___9~2); 2460355#L2849-3 assume !(1 == ~doorState~0); 2460354#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2460352#L347-29 assume !(0 == isFloorCalling_~floorID); 2448363#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2447472#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2450550#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2450547#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2450548#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2453810#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2454248#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2454249#L2546-3 assume !(1 == ~currentHeading~0); 2459933#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2453658#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2453650#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2453643#L347-51 assume !(0 == isFloorCalling_~floorID); 2453645#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2457752#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2457753#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2457743#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2457742#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2453661#L347-52 assume !(0 == isFloorCalling_~floorID); 2453662#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2457714#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2457711#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2457712#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2458217#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2458218#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2457675#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2457676#L2758-2 assume !(0 != timeShift_~tmp___9~2); 2453559#L2849-6 assume !(1 == ~doorState~0); 2453560#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2453551#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2453552#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2470201#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2468274#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2467277#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2467276#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2467267#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2467222#L2546-6 assume !(1 == ~currentHeading~0); 2467204#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2467198#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2467187#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2467188#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2453541#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2467181#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2467168#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2467163#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2467164#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2475318#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2475316#L618-1 assume 0 == initPersonOnFloor_~floor; 2467105#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2467072#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2467066#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2467063#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2464997#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2464996#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2464995#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2464994#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2464842#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2464144#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2445246#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2478884#L2758-3 assume !(0 != timeShift_~tmp___9~2); 2447242#L2849-9 assume !(1 == ~doorState~0); 2447243#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2447246#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2446178#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2445598#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2445599#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2445980#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2481088#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2481084#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2478822#L2546-9 assume !(1 == ~currentHeading~0); 2478823#L2556-27 assume !(0 == ~currentFloorID~0); 2448116#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2441763#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2492408#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2446075#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2446076#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2445110#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2445111#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2507086#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2442750#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2442110#L941-7 cleanup_~i~2 := 0; 2445113#L1129-2 assume !false; 2507927#L1130 [2018-11-23 14:14:46,279 INFO L796 eck$LassoCheckResult]: Loop: 2507927#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2530674#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2530673#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 2530672#L1137 assume 1 != cleanup_~tmp___0~3; 2530671#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2530670#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2530669#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2530668#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2530667#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2530666#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 2530665#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2530664#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2513305#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2530663#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2530662#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2530661#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2530659#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2530658#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2530657#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 2530656#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 2530649#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2531398#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2531387#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2530645#L2760-8 assume !(0 != ~persons_0~0); 2531370#L2760-9 assume !(0 != ~persons_1~0); 2531314#L2774-4 assume !(0 != ~persons_2~0); 2531305#L2788-4 assume !(0 != ~persons_3~0); 2531243#L2802-4 assume !(0 != ~persons_4~0); 2531220#L2816-4 assume !(0 != ~persons_5~0); 2531211#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2531206#L438-48 assume 0 == isPersonOnFloor_~floor; 2531181#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2531167#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 2531163#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 2531152#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2531150#L438-50 assume 0 == isPersonOnFloor_~floor; 2531149#L439-25 assume !(0 == isPersonOnFloor_~person); 2531139#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2531114#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 2531107#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 2531103#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2531100#L438-52 assume 0 == isPersonOnFloor_~floor; 2531101#L439-26 assume !(0 == isPersonOnFloor_~person); 2531105#L443-26 assume !(1 == isPersonOnFloor_~person); 2531029#L447-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2531026#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 2531003#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2530996#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2530994#L438-54 assume 0 == isPersonOnFloor_~floor; 2530993#L439-27 assume !(0 == isPersonOnFloor_~person); 2530992#L443-27 assume !(1 == isPersonOnFloor_~person); 2530923#L447-27 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2530913#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 2530908#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2530904#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2530899#L438-56 assume 0 == isPersonOnFloor_~floor; 2530900#L439-28 assume !(0 == isPersonOnFloor_~person); 2530901#L443-28 assume !(1 == isPersonOnFloor_~person); 2530779#L447-28 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2530760#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 2530758#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2530750#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2530747#L438-58 assume 0 == isPersonOnFloor_~floor; 2530748#L439-29 assume !(0 == isPersonOnFloor_~person); 2530739#L443-29 assume !(1 == isPersonOnFloor_~person); 2530713#L447-29 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2530711#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 2530706#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2530702#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2530700#L382-68 assume !(0 == resetCallOnFloor_~floorID); 2530697#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2530695#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2530691#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2530685#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2530684#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2513806#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2530683#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2530682#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2530681#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2530680#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2530678#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2530676#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 2530675#L1129-2 assume !false; 2507927#L1130 [2018-11-23 14:14:46,284 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:46,284 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 2 times [2018-11-23 14:14:46,284 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:46,284 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:46,285 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:46,285 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:46,285 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:46,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:46,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:46,348 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:46,348 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:14:46,348 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:14:46,348 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:46,348 INFO L82 PathProgramCache]: Analyzing trace with hash -866657907, now seen corresponding path program 1 times [2018-11-23 14:14:46,348 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:46,348 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:46,349 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:46,349 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:14:46,349 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:46,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:46,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:46,366 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:46,366 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:14:46,366 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:14:46,367 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 14:14:46,367 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 14:14:46,367 INFO L87 Difference]: Start difference. First operand 101934 states and 187465 transitions. cyclomatic complexity: 85561 Second operand 3 states. [2018-11-23 14:14:47,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:14:47,666 INFO L93 Difference]: Finished difference Result 171294 states and 315094 transitions. [2018-11-23 14:14:47,666 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 14:14:47,666 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 171294 states and 315094 transitions. [2018-11-23 14:14:48,055 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 54822 [2018-11-23 14:14:48,367 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 171294 states to 171294 states and 315094 transitions. [2018-11-23 14:14:48,367 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130118 [2018-11-23 14:14:48,431 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130118 [2018-11-23 14:14:48,431 INFO L73 IsDeterministic]: Start isDeterministic. Operand 171294 states and 315094 transitions. [2018-11-23 14:14:48,433 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:14:48,433 INFO L705 BuchiCegarLoop]: Abstraction has 171294 states and 315094 transitions. [2018-11-23 14:14:48,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171294 states and 315094 transitions. [2018-11-23 14:14:49,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171294 to 100964. [2018-11-23 14:14:49,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 100964 states. [2018-11-23 14:14:49,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100964 states to 100964 states and 184555 transitions. [2018-11-23 14:14:49,360 INFO L728 BuchiCegarLoop]: Abstraction has 100964 states and 184555 transitions. [2018-11-23 14:14:49,360 INFO L608 BuchiCegarLoop]: Abstraction has 100964 states and 184555 transitions. [2018-11-23 14:14:49,360 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-23 14:14:49,360 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100964 states and 184555 transitions. [2018-11-23 14:14:49,538 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 31866 [2018-11-23 14:14:49,538 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:14:49,539 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:14:49,540 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:49,540 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:49,540 INFO L794 eck$LassoCheckResult]: Stem: 2719496#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2719497#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2718851#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2718233#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 2718234#L1323 assume 0 != main_~tmp~11; 2715909#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2715910#L85 assume !(0 == getOrigin_~person); 2721030#L89 assume !(1 == getOrigin_~person); 2720840#L93 assume !(2 == getOrigin_~person); 2720841#L97 assume !(3 == getOrigin_~person); 2722144#L101 assume !(4 == getOrigin_~person); 2719604#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2719511#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2719512#L618 assume 0 == initPersonOnFloor_~floor; 2720996#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2715367#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2718564#L410 assume !(0 == callOnFloor_~floorID); 2718319#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2715119#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2715120#L347 assume !(0 == isFloorCalling_~floorID); 2722551#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2729788#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2729791#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2729782#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2729783#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2729765#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2729763#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2729761#L2758 assume !(0 != timeShift_~tmp___9~2); 2729760#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 2729759#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2729753#L347-3 assume !(0 == isFloorCalling_~floorID); 2729750#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2729747#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2729746#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2729745#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2729571#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2729570#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2729568#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2716725#L2546 assume !(1 == ~currentHeading~0); 2716726#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2724784#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2722782#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2722783#L347-25 assume !(0 == isFloorCalling_~floorID); 2721532#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2720674#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2725462#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2725463#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2722774#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2722771#L347-26 assume !(0 == isFloorCalling_~floorID); 2722773#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2731570#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2731573#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2731564#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2731565#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2731546#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2731544#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2731542#L2758-1 assume !(0 != timeShift_~tmp___9~2); 2731541#L2849-3 assume !(1 == ~doorState~0); 2731540#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2731538#L347-29 assume !(0 == isFloorCalling_~floorID); 2731536#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2731533#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2731532#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2731531#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2723728#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2723724#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2723604#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2723148#L2546-3 assume !(1 == ~currentHeading~0); 2723143#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2722992#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2724700#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2724697#L347-51 assume !(0 == isFloorCalling_~floorID); 2724699#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2724690#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2724691#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2724681#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2724680#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2724675#L347-52 assume !(0 == isFloorCalling_~floorID); 2724672#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2724669#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2724668#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2724661#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2724659#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2724653#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2724652#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2724650#L2758-2 assume !(0 != timeShift_~tmp___9~2); 2724649#L2849-6 assume !(1 == ~doorState~0); 2724648#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2724646#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2724647#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2738914#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2738911#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2738349#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2738347#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2738344#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2738345#L2546-6 assume !(1 == ~currentHeading~0); 2745599#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2742807#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2742801#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2742800#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2724190#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2742799#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2742794#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2742792#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2742791#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2742785#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2742784#L618-1 assume 0 == initPersonOnFloor_~floor; 2742751#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2742718#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2742648#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2742645#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2742644#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2742641#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2742640#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2739713#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2739712#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2739711#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2718465#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2753101#L2758-3 assume !(0 != timeShift_~tmp___9~2); 2753100#L2849-9 assume !(1 == ~doorState~0); 2753099#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2753098#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2753097#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2753096#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2753095#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2751455#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2748852#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2748853#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2723744#L2546-9 assume !(1 == ~currentHeading~0); 2716694#L2556-27 assume !(0 == ~currentFloorID~0); 2721270#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2752648#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2751965#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2751962#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2751960#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2751961#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2756969#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2756968#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2751952#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2751951#L941-7 cleanup_~i~2 := 0; 2751946#L1129-2 assume !false; 2751947#L1130 [2018-11-23 14:14:49,540 INFO L796 eck$LassoCheckResult]: Loop: 2751947#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2792539#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2792538#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 2792535#L1137 assume 1 != cleanup_~tmp___0~3; 2792534#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2792533#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2792531#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2792528#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2792527#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2792526#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 2792525#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2792524#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2785383#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2792520#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2792519#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2792518#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2792516#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2792515#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2792511#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 2792510#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 2792310#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2793309#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2793298#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2792303#L2760-8 assume !(0 != ~persons_0~0); 2793281#L2760-9 assume !(0 != ~persons_1~0); 2793266#L2774-4 assume !(0 != ~persons_2~0); 2793251#L2788-4 assume !(0 != ~persons_3~0); 2793189#L2802-4 assume !(0 != ~persons_4~0); 2793096#L2816-4 assume !(0 != ~persons_5~0); 2793081#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2793077#L438-48 assume 0 == isPersonOnFloor_~floor; 2793052#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2793039#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 2793025#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 2792983#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792982#L438-50 assume 0 == isPersonOnFloor_~floor; 2792981#L439-25 assume !(0 == isPersonOnFloor_~person); 2792970#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792938#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 2792923#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 2792907#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792903#L438-52 assume 0 == isPersonOnFloor_~floor; 2792900#L439-26 assume !(0 == isPersonOnFloor_~person); 2792897#L443-26 assume !(1 == isPersonOnFloor_~person); 2792878#L447-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792873#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 2792864#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2792814#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792810#L438-54 assume 0 == isPersonOnFloor_~floor; 2792811#L439-27 assume !(0 == isPersonOnFloor_~person); 2792809#L443-27 assume !(1 == isPersonOnFloor_~person); 2792805#L447-27 assume !(2 == isPersonOnFloor_~person); 2792783#L451-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792779#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 2792768#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2792764#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792762#L438-56 assume 0 == isPersonOnFloor_~floor; 2792763#L439-28 assume !(0 == isPersonOnFloor_~person); 2792799#L443-28 assume !(1 == isPersonOnFloor_~person); 2792748#L447-28 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792729#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 2792717#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2792617#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792613#L438-58 assume 0 == isPersonOnFloor_~floor; 2792610#L439-29 assume !(0 == isPersonOnFloor_~person); 2792607#L443-29 assume !(1 == isPersonOnFloor_~person); 2792586#L447-29 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792584#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 2792573#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2792569#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2792567#L382-68 assume !(0 == resetCallOnFloor_~floorID); 2792564#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2792562#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2792557#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2792551#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2792550#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2785481#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2792549#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2792548#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2792547#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2792546#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2792544#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2792542#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 2792540#L1129-2 assume !false; 2751947#L1130 [2018-11-23 14:14:49,547 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:49,547 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 3 times [2018-11-23 14:14:49,547 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:49,547 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:49,548 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:49,548 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:49,548 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:49,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:49,623 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:49,623 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:49,623 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:14:49,623 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:14:49,623 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:49,624 INFO L82 PathProgramCache]: Analyzing trace with hash 1225979513, now seen corresponding path program 1 times [2018-11-23 14:14:49,624 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:49,624 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:49,624 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:49,624 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:14:49,624 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:49,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:49,648 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:49,648 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:49,648 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:14:49,649 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:14:49,649 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 14:14:49,649 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 14:14:49,649 INFO L87 Difference]: Start difference. First operand 100964 states and 184555 transitions. cyclomatic complexity: 83621 Second operand 3 states. [2018-11-23 14:14:50,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:14:50,701 INFO L93 Difference]: Finished difference Result 164601 states and 300835 transitions. [2018-11-23 14:14:50,702 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 14:14:50,702 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 164601 states and 300835 transitions. [2018-11-23 14:14:51,375 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 52545 [2018-11-23 14:14:51,648 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 164601 states to 164601 states and 300835 transitions. [2018-11-23 14:14:51,648 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 124943 [2018-11-23 14:14:51,700 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 124943 [2018-11-23 14:14:51,701 INFO L73 IsDeterministic]: Start isDeterministic. Operand 164601 states and 300835 transitions. [2018-11-23 14:14:51,701 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:14:51,701 INFO L705 BuchiCegarLoop]: Abstraction has 164601 states and 300835 transitions. [2018-11-23 14:14:51,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164601 states and 300835 transitions. [2018-11-23 14:14:52,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164601 to 100479. [2018-11-23 14:14:52,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 100479 states. [2018-11-23 14:14:52,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100479 states to 100479 states and 182130 transitions. [2018-11-23 14:14:52,616 INFO L728 BuchiCegarLoop]: Abstraction has 100479 states and 182130 transitions. [2018-11-23 14:14:52,616 INFO L608 BuchiCegarLoop]: Abstraction has 100479 states and 182130 transitions. [2018-11-23 14:14:52,616 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-23 14:14:52,616 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100479 states and 182130 transitions. [2018-11-23 14:14:52,796 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 31701 [2018-11-23 14:14:52,796 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:14:52,796 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:14:52,798 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:52,798 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:52,798 INFO L794 eck$LassoCheckResult]: Stem: 2985060#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2985061#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2984426#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2983798#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 2983799#L1323 assume 0 != main_~tmp~11; 2981474#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2981475#L85 assume !(0 == getOrigin_~person); 2986558#L89 assume !(1 == getOrigin_~person); 2986368#L93 assume !(2 == getOrigin_~person); 2986369#L97 assume !(3 == getOrigin_~person); 2987690#L101 assume !(4 == getOrigin_~person); 2985164#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2985072#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2985073#L618 assume 0 == initPersonOnFloor_~floor; 2986519#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2980936#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2984131#L410 assume !(0 == callOnFloor_~floorID); 2983884#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2980694#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2980695#L347 assume !(0 == isFloorCalling_~floorID); 2982084#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986698#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2988114#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2988113#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2987107#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2984023#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2984025#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2988083#L2758 assume !(0 != timeShift_~tmp___9~2); 2988076#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 2988068#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2988053#L347-3 assume !(0 == isFloorCalling_~floorID); 2986932#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986732#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2988090#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2988087#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2987110#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2987111#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2988390#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2988391#L2546 assume !(1 == ~currentHeading~0); 2988365#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2988364#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2989639#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2988336#L347-25 assume !(0 == isFloorCalling_~floorID); 2988338#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2989485#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2989486#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2988660#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2988659#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2988339#L347-26 assume !(0 == isFloorCalling_~floorID); 2987068#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986137#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2988304#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2988299#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2988296#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2988293#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2988294#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2988317#L2758-1 assume !(0 != timeShift_~tmp___9~2); 2988313#L2849-3 assume !(1 == ~doorState~0); 2988311#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2988309#L347-29 assume !(0 == isFloorCalling_~floorID); 2987041#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986154#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2988308#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2997147#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2993497#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2993496#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2993421#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2993419#L2546-3 assume !(1 == ~currentHeading~0); 2992354#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2992353#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2992317#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2992318#L347-51 assume !(0 == isFloorCalling_~floorID); 2987013#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986046#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2994492#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2994493#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2996551#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2992308#L347-52 assume !(0 == isFloorCalling_~floorID); 2987015#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986050#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2992298#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2992294#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2992290#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2992284#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2992281#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2992277#L2758-2 assume !(0 != timeShift_~tmp___9~2); 2992273#L2849-6 assume !(1 == ~doorState~0); 2992270#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2992267#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2992268#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3006304#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3006301#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3006302#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3006311#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3006308#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3006309#L2546-6 assume !(1 == ~currentHeading~0); 3013491#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2987116#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3013480#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3013479#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2992257#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3013478#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3013474#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3013471#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3013469#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 3013463#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3013461#L618-1 assume 0 == initPersonOnFloor_~floor; 3013431#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3013345#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3011078#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3011073#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3010952#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3010951#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3010950#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3010949#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3010948#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3010946#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3010947#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3014331#L2758-3 assume !(0 != timeShift_~tmp___9~2); 3018157#L2849-9 assume !(1 == ~doorState~0); 3019928#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3019927#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3019926#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3014314#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3014315#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3018986#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3018985#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3018983#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3018982#L2546-9 assume !(1 == ~currentHeading~0); 2986798#L2556-27 assume !(0 == ~currentFloorID~0); 2986799#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3018968#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3037375#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3018959#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3018958#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2983893#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2983894#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 3045885#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 3045883#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 3045880#L941-7 cleanup_~i~2 := 0; 3045877#L1129-2 assume !false; 3045878#L1130 [2018-11-23 14:14:52,798 INFO L796 eck$LassoCheckResult]: Loop: 3045878#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3055717#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3055716#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 3055715#L1137 assume 1 != cleanup_~tmp___0~3; 3055713#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3055712#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3055710#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 3055708#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3055706#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3055704#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 3055700#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3055698#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3048368#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3055696#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3055694#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3055692#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3055689#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3055687#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3055685#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 3055683#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 3055337#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3060217#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3060216#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3055329#L2760-8 assume !(0 != ~persons_0~0); 3060201#L2760-9 assume !(0 != ~persons_1~0); 3060197#L2774-4 assume !(0 != ~persons_2~0); 3060172#L2788-4 assume !(0 != ~persons_3~0); 3060159#L2802-4 assume !(0 != ~persons_4~0); 3060147#L2816-4 assume !(0 != ~persons_5~0); 3058599#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3058597#L438-48 assume 0 == isPersonOnFloor_~floor; 3058572#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3058565#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 3058456#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 3058439#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3058437#L438-50 assume 0 == isPersonOnFloor_~floor; 3058436#L439-25 assume !(0 == isPersonOnFloor_~person); 3058426#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3058400#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 3058387#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 3058376#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3058372#L438-52 assume 0 == isPersonOnFloor_~floor; 3058369#L439-26 assume !(0 == isPersonOnFloor_~person); 3058368#L443-26 assume !(1 == isPersonOnFloor_~person); 3058349#L447-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3058346#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 3058267#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3057351#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3057349#L438-54 assume 0 == isPersonOnFloor_~floor; 3057350#L439-27 assume !(0 == isPersonOnFloor_~person); 3057367#L443-27 assume !(1 == isPersonOnFloor_~person); 3057365#L447-27 assume !(2 == isPersonOnFloor_~person); 3057328#L451-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3057324#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 3057313#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3057308#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3057305#L438-56 assume 0 == isPersonOnFloor_~floor; 3057306#L439-28 assume !(0 == isPersonOnFloor_~person); 3057358#L443-28 assume !(1 == isPersonOnFloor_~person); 3057355#L447-28 assume !(2 == isPersonOnFloor_~person); 3057352#L451-28 assume !(3 == isPersonOnFloor_~person); 3057288#L455-28 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3057256#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 3057229#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3057221#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3057217#L438-58 assume 0 == isPersonOnFloor_~floor; 3057214#L439-29 assume !(0 == isPersonOnFloor_~person); 3057211#L443-29 assume !(1 == isPersonOnFloor_~person); 3057190#L447-29 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3057189#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 3057120#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3057115#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3057097#L382-68 assume !(0 == resetCallOnFloor_~floorID); 3057085#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 3057079#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3055737#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3055185#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3055732#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3047629#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3055730#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3055729#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3055728#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 3055727#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 3055725#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 3055723#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 3055167#L1129-2 assume !false; 3045878#L1130 [2018-11-23 14:14:52,806 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:52,806 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 4 times [2018-11-23 14:14:52,806 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:52,806 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:52,807 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:52,807 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:52,807 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:52,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:52,867 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:52,867 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:52,867 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:14:52,867 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:14:52,867 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:52,867 INFO L82 PathProgramCache]: Analyzing trace with hash 1017414814, now seen corresponding path program 1 times [2018-11-23 14:14:52,867 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:52,868 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:52,868 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:52,868 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:14:52,868 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:52,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:52,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:52,895 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:52,895 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 14:14:52,895 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:14:52,895 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 14:14:52,896 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 14:14:52,896 INFO L87 Difference]: Start difference. First operand 100479 states and 182130 transitions. cyclomatic complexity: 81681 Second operand 3 states. [2018-11-23 14:14:53,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:14:53,951 INFO L93 Difference]: Finished difference Result 154703 states and 281176 transitions. [2018-11-23 14:14:53,951 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 14:14:53,951 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 154703 states and 281176 transitions. [2018-11-23 14:14:54,339 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 45995 [2018-11-23 14:14:54,933 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 154703 states to 154703 states and 281176 transitions. [2018-11-23 14:14:54,933 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117378 [2018-11-23 14:14:54,981 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117378 [2018-11-23 14:14:54,981 INFO L73 IsDeterministic]: Start isDeterministic. Operand 154703 states and 281176 transitions. [2018-11-23 14:14:54,982 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:14:54,982 INFO L705 BuchiCegarLoop]: Abstraction has 154703 states and 281176 transitions. [2018-11-23 14:14:55,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154703 states and 281176 transitions. [2018-11-23 14:14:55,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154703 to 100479. [2018-11-23 14:14:55,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 100479 states. [2018-11-23 14:14:55,830 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100479 states to 100479 states and 180675 transitions. [2018-11-23 14:14:55,830 INFO L728 BuchiCegarLoop]: Abstraction has 100479 states and 180675 transitions. [2018-11-23 14:14:55,830 INFO L608 BuchiCegarLoop]: Abstraction has 100479 states and 180675 transitions. [2018-11-23 14:14:55,830 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-23 14:14:55,831 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100479 states and 180675 transitions. [2018-11-23 14:14:56,009 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 31701 [2018-11-23 14:14:56,009 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:14:56,009 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:14:56,010 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:56,010 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:14:56,010 INFO L794 eck$LassoCheckResult]: Stem: 3240306#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3240307#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 3239649#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3239000#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 3239001#L1323 assume 0 != main_~tmp~11; 3236687#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3236688#L85 assume !(0 == getOrigin_~person); 3241822#L89 assume !(1 == getOrigin_~person); 3241632#L93 assume !(2 == getOrigin_~person); 3241633#L97 assume !(3 == getOrigin_~person); 3242968#L101 assume !(4 == getOrigin_~person); 3240410#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3240320#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3240321#L618 assume 0 == initPersonOnFloor_~floor; 3241783#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3236138#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3239338#L410 assume !(0 == callOnFloor_~floorID); 3239088#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3235886#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3235887#L347 assume !(0 == isFloorCalling_~floorID); 3237308#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3241963#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3243401#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3243402#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3242380#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3242381#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3245903#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3245901#L2758 assume !(0 != timeShift_~tmp___9~2); 3245900#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 3245899#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3245898#L347-3 assume !(0 == isFloorCalling_~floorID); 3245891#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3245888#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3245887#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3245882#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3245881#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3245880#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3245878#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3245877#L2546 assume !(1 == ~currentHeading~0); 3245876#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3243620#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3243621#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3243600#L347-25 assume !(0 == isFloorCalling_~floorID); 3243601#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3245858#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3245855#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3244746#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3244745#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3243602#L347-26 assume !(0 == isFloorCalling_~floorID); 3242342#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3241402#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3243597#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3243594#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3243591#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3243586#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3243582#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3243578#L2758-1 assume !(0 != timeShift_~tmp___9~2); 3243575#L2849-3 assume !(1 == ~doorState~0); 3243573#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3243572#L347-29 assume !(0 == isFloorCalling_~floorID); 3242314#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3241418#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3243596#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3243592#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3243593#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3251974#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3251887#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3251799#L2546-3 assume !(1 == ~currentHeading~0); 3251785#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3251494#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3247988#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3247985#L347-51 assume !(0 == isFloorCalling_~floorID); 3242286#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3241312#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3253569#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3253562#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3253560#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3253556#L347-52 assume !(0 == isFloorCalling_~floorID); 3253557#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3259312#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3259315#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3259306#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3259307#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3259288#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3259286#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3259284#L2758-2 assume !(0 != timeShift_~tmp___9~2); 3259283#L2849-6 assume !(1 == ~doorState~0); 3259282#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3259280#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3259281#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3262862#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3262861#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3262485#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3262483#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3262481#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3262480#L2546-6 assume !(1 == ~currentHeading~0); 3262367#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3262353#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3262351#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3269431#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3244789#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3269430#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3269426#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3269425#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3269424#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 3269418#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3269417#L618-1 assume 0 == initPersonOnFloor_~floor; 3269384#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3262099#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3260346#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3260328#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3259026#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3259027#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3259019#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3259017#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3259015#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3259012#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3239234#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3271894#L2758-3 assume !(0 != timeShift_~tmp___9~2); 3241185#L2849-9 assume !(1 == ~doorState~0); 3241186#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3241188#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3240138#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3239592#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3239593#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3239945#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3288548#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3288546#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3288545#L2546-9 assume !(1 == ~currentHeading~0); 3242067#L2556-27 assume !(0 == ~currentFloorID~0); 3242068#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3288500#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3292407#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3244936#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3292406#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3292405#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3292404#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 3292403#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 3288488#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 3288486#L941-7 cleanup_~i~2 := 0; 3288482#L1129-2 assume !false; 3288483#L1130 [2018-11-23 14:14:56,011 INFO L796 eck$LassoCheckResult]: Loop: 3288483#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3322877#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3322874#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 3322873#L1137 assume 1 != cleanup_~tmp___0~3; 3322872#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3322870#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3322866#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 3322865#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3322864#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3322863#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 3322860#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3322612#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3303019#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3322609#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3322608#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3322607#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3322604#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3322601#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3322598#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 3322595#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 3322584#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3326032#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3326031#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3322574#L2760-8 assume !(0 != ~persons_0~0); 3326010#L2760-9 assume !(0 != ~persons_1~0); 3325910#L2774-4 assume !(0 != ~persons_2~0); 3325901#L2788-4 assume !(0 != ~persons_3~0); 3325890#L2802-4 assume !(0 != ~persons_4~0); 3325858#L2816-4 assume !(0 != ~persons_5~0); 3325846#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3325844#L438-48 assume 0 == isPersonOnFloor_~floor; 3325819#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3325812#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 3325809#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 3325803#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3325801#L438-50 assume 0 == isPersonOnFloor_~floor; 3325800#L439-25 assume !(0 == isPersonOnFloor_~person); 3325790#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3325765#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 3325689#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 3323679#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3323677#L438-52 assume 0 == isPersonOnFloor_~floor; 3323678#L439-26 assume !(0 == isPersonOnFloor_~person); 3323667#L443-26 assume !(1 == isPersonOnFloor_~person); 3323648#L447-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3323645#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 3323636#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3323011#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3323007#L438-54 assume 0 == isPersonOnFloor_~floor; 3323004#L439-27 assume !(0 == isPersonOnFloor_~person); 3323001#L443-27 assume !(1 == isPersonOnFloor_~person); 3323000#L447-27 assume !(2 == isPersonOnFloor_~person); 3322982#L451-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3322978#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 3322966#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3322962#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3322960#L438-56 assume 0 == isPersonOnFloor_~floor; 3322961#L439-28 assume !(0 == isPersonOnFloor_~person); 3323018#L443-28 assume !(1 == isPersonOnFloor_~person); 3323017#L447-28 assume !(2 == isPersonOnFloor_~person); 3323016#L451-28 assume !(3 == isPersonOnFloor_~person); 3322567#L455-28 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3322565#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 3322561#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3322554#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3322551#L438-58 assume !(0 == isPersonOnFloor_~floor); 3322547#L471-58 assume !(1 == isPersonOnFloor_~floor); 3322545#L504-58 assume !(2 == isPersonOnFloor_~floor); 3322543#L537-58 assume !(3 == isPersonOnFloor_~floor); 3322540#L570-87 assume !(4 == isPersonOnFloor_~floor); 3322098#L570-89 isPersonOnFloor_~retValue_acc~4 := 0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3322097#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 3321993#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3321990#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3321983#L382-68 assume !(0 == resetCallOnFloor_~floorID); 3321985#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 3321936#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3321937#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3321051#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3322890#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3314149#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3322889#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3322888#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3322887#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 3322886#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 3322884#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 3322882#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 3321902#L1129-2 assume !false; 3288483#L1130 [2018-11-23 14:14:56,019 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:56,019 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 5 times [2018-11-23 14:14:56,019 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:56,019 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:56,020 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:56,020 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:14:56,020 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:56,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:56,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:56,078 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:56,078 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:14:56,078 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:14:56,078 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:14:56,078 INFO L82 PathProgramCache]: Analyzing trace with hash 812050846, now seen corresponding path program 1 times [2018-11-23 14:14:56,078 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:14:56,079 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:14:56,079 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:56,079 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:14:56,079 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:14:56,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:14:56,134 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:14:56,135 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:14:56,135 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-23 14:14:56,135 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:14:56,138 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-23 14:14:56,138 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-23 14:14:56,138 INFO L87 Difference]: Start difference. First operand 100479 states and 180675 transitions. cyclomatic complexity: 80226 Second operand 9 states. [2018-11-23 14:15:08,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:15:08,035 INFO L93 Difference]: Finished difference Result 461453 states and 834023 transitions. [2018-11-23 14:15:08,036 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2018-11-23 14:15:08,036 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 461453 states and 834023 transitions. [2018-11-23 14:15:09,233 INFO L131 ngComponentsAnalysis]: Automaton has 40 accepting balls. 125810 [2018-11-23 14:15:10,220 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 461453 states to 461417 states and 833987 transitions. [2018-11-23 14:15:10,220 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 347079 [2018-11-23 14:15:10,402 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 347079 [2018-11-23 14:15:10,402 INFO L73 IsDeterministic]: Start isDeterministic. Operand 461417 states and 833987 transitions. [2018-11-23 14:15:10,449 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:15:10,449 INFO L705 BuchiCegarLoop]: Abstraction has 461417 states and 833987 transitions. [2018-11-23 14:15:10,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 461417 states and 833987 transitions. [2018-11-23 14:15:12,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 461417 to 119505. [2018-11-23 14:15:12,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 119505 states. [2018-11-23 14:15:13,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119505 states to 119505 states and 214529 transitions. [2018-11-23 14:15:13,039 INFO L728 BuchiCegarLoop]: Abstraction has 119505 states and 214529 transitions. [2018-11-23 14:15:13,039 INFO L608 BuchiCegarLoop]: Abstraction has 119505 states and 214529 transitions. [2018-11-23 14:15:13,039 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-23 14:15:13,039 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 119505 states and 214529 transitions. [2018-11-23 14:15:13,250 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 37454 [2018-11-23 14:15:13,250 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:15:13,250 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:15:13,252 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:13,252 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:13,252 INFO L794 eck$LassoCheckResult]: Stem: 3802285#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3802286#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 3801647#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3800986#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 3800987#L1323 assume 0 != main_~tmp~11; 3798699#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3798700#L85 assume !(0 == getOrigin_~person); 3803816#L89 assume !(1 == getOrigin_~person); 3803624#L93 assume !(2 == getOrigin_~person); 3803625#L97 assume !(3 == getOrigin_~person); 3805008#L101 assume !(4 == getOrigin_~person); 3802383#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3802297#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3802298#L618 assume 0 == initPersonOnFloor_~floor; 3803777#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3798181#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3801322#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3801323#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3805408#L347 assume !(0 == isFloorCalling_~floorID); 3805409#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3806817#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3805418#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3805419#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3806809#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3805398#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3805400#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3805442#L2758 assume !(0 != timeShift_~tmp___9~2); 3805443#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 3805402#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3805403#L347-3 assume !(0 == isFloorCalling_~floorID); 3804173#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3803971#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3805488#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3805489#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3805482#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3805483#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3805444#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3805446#L2546 assume !(1 == ~currentHeading~0); 3807515#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3807507#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3805703#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3805704#L347-25 assume !(0 == isFloorCalling_~floorID); 3804369#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3803469#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3805725#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3805726#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3806349#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3806350#L347-26 assume !(0 == isFloorCalling_~floorID); 3815077#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3815074#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3815072#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3815069#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3815070#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3815066#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3815067#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3815031#L2758-1 assume !(0 != timeShift_~tmp___9~2); 3807744#L2849-3 assume !(1 == ~doorState~0); 3807745#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3805577#L347-29 assume !(0 == isFloorCalling_~floorID); 3805579#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3805562#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3805563#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3805479#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3805480#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3809641#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3809632#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3809633#L2546-3 assume !(1 == ~currentHeading~0); 3819355#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3819352#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3818992#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3809422#L347-51 assume !(0 == isFloorCalling_~floorID); 3809424#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3818982#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3818981#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3809567#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3809530#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3809425#L347-52 assume !(0 == isFloorCalling_~floorID); 3809426#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3809581#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3809582#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3809576#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3809578#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3809531#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3809532#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3818933#L2758-2 assume !(0 != timeShift_~tmp___9~2); 3818920#L2849-6 assume !(1 == ~doorState~0); 3807949#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3807950#L347-55 assume !(0 == isFloorCalling_~floorID); 3807939#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3807937#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3807925#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3807926#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3818848#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3818937#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3818928#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3818914#L2546-6 assume !(1 == ~currentHeading~0); 3818840#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3818817#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3818812#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3810946#L347-77 assume !(0 == isFloorCalling_~floorID); 3810948#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3810941#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3810942#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3810939#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3809601#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3809602#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 3810927#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3810924#L618-1 assume 0 == initPersonOnFloor_~floor; 3810925#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3810895#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3810896#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3809405#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3809406#L347-78 assume !(0 == isFloorCalling_~floorID); 3803786#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3803630#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3809565#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3809419#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3809421#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3809402#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3809404#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3826158#L2758-3 assume !(0 != timeShift_~tmp___9~2); 3841974#L2849-9 assume !(1 == ~doorState~0); 3834079#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3834080#L347-81 assume !(0 == isFloorCalling_~floorID); 3807934#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3807932#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3807923#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3807924#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3833154#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3833155#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3833549#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3833550#L2546-9 assume !(1 == ~currentHeading~0); 3833153#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3833124#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3837317#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3837308#L347-103 assume !(0 == isFloorCalling_~floorID); 3836810#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3836806#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3836804#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3836800#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3836797#L941-7 cleanup_~i~2 := 0; 3836798#L1129-2 assume !false; 3839223#L1130 [2018-11-23 14:15:13,252 INFO L796 eck$LassoCheckResult]: Loop: 3839223#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3872046#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3872042#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 3872041#L1137 assume 1 != cleanup_~tmp___0~3; 3872013#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3872008#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3872006#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 3871982#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3871975#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3871972#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 3871970#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3871967#L347-109 assume !(0 == isFloorCalling_~floorID); 3871965#L351-109 assume !(1 == isFloorCalling_~floorID); 3871962#L355-109 assume !(2 == isFloorCalling_~floorID); 3871960#L359-109 assume !(3 == isFloorCalling_~floorID); 3871957#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3871955#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3871949#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3871947#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3871944#L347-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3871935#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 3871933#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3871929#L1954-9 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3871924#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 3871921#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 3871918#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3871916#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3871914#L2758-4 assume !(0 != timeShift_~tmp___9~2); 3871913#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 3871890#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3871880#L347-112 assume !(0 == isFloorCalling_~floorID); 3871846#L351-112 assume !(1 == isFloorCalling_~floorID); 3871847#L355-112 assume !(2 == isFloorCalling_~floorID); 3871848#L359-112 assume !(3 == isFloorCalling_~floorID); 3871844#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3871845#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3875685#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3875680#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3875681#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3875706#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3875700#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3875612#L2546-12 assume !(1 == ~currentHeading~0); 3875608#L2556-36 assume !(0 == ~currentFloorID~0); 3872818#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3872768#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3872742#L347-134 assume !(0 == isFloorCalling_~floorID); 3872741#L351-134 assume !(1 == isFloorCalling_~floorID); 3872740#L355-134 assume !(2 == isFloorCalling_~floorID); 3872724#L359-134 assume !(3 == isFloorCalling_~floorID); 3872712#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3872702#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3872078#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3872074#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3872071#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 3872069#L1129-2 assume !false; 3839223#L1130 [2018-11-23 14:15:13,256 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:13,256 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 1 times [2018-11-23 14:15:13,256 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:13,256 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:13,257 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:13,257 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:15:13,257 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:13,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:13,344 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:13,344 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:13,344 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:15:13,344 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:15:13,344 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:13,345 INFO L82 PathProgramCache]: Analyzing trace with hash -166789446, now seen corresponding path program 1 times [2018-11-23 14:15:13,345 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:13,345 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:13,345 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:13,345 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:15:13,345 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:13,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:13,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:13,376 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:13,376 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 14:15:13,377 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:15:13,377 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 14:15:13,377 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 14:15:13,377 INFO L87 Difference]: Start difference. First operand 119505 states and 214529 transitions. cyclomatic complexity: 95070 Second operand 7 states. [2018-11-23 14:15:20,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:15:20,055 INFO L93 Difference]: Finished difference Result 554425 states and 993542 transitions. [2018-11-23 14:15:20,055 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-11-23 14:15:20,055 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 554425 states and 993542 transitions. [2018-11-23 14:15:21,501 INFO L131 ngComponentsAnalysis]: Automaton has 37 accepting balls. 174291 [2018-11-23 14:15:23,322 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 554425 states to 554425 states and 993542 transitions. [2018-11-23 14:15:23,322 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 386046 [2018-11-23 14:15:23,445 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 386046 [2018-11-23 14:15:23,445 INFO L73 IsDeterministic]: Start isDeterministic. Operand 554425 states and 993542 transitions. [2018-11-23 14:15:23,446 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:15:23,446 INFO L705 BuchiCegarLoop]: Abstraction has 554425 states and 993542 transitions. [2018-11-23 14:15:23,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 554425 states and 993542 transitions. [2018-11-23 14:15:25,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 554425 to 118737. [2018-11-23 14:15:25,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 118737 states. [2018-11-23 14:15:25,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118737 states to 118737 states and 213192 transitions. [2018-11-23 14:15:25,387 INFO L728 BuchiCegarLoop]: Abstraction has 118737 states and 213192 transitions. [2018-11-23 14:15:25,387 INFO L608 BuchiCegarLoop]: Abstraction has 118737 states and 213192 transitions. [2018-11-23 14:15:25,388 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-11-23 14:15:25,388 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 118737 states and 213192 transitions. [2018-11-23 14:15:25,594 INFO L131 ngComponentsAnalysis]: Automaton has 34 accepting balls. 37003 [2018-11-23 14:15:25,594 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:15:25,594 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:15:25,596 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:25,596 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:25,597 INFO L794 eck$LassoCheckResult]: Stem: 4476028#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4476029#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 4475405#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4474816#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 4474817#L1323 assume 0 != main_~tmp~11; 4472672#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4472673#L85 assume !(0 == getOrigin_~person); 4477473#L89 assume !(1 == getOrigin_~person); 4477282#L93 assume !(2 == getOrigin_~person); 4477283#L97 assume !(3 == getOrigin_~person); 4478590#L101 assume !(4 == getOrigin_~person); 4476121#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 4476041#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4476042#L618 assume 0 == initPersonOnFloor_~floor; 4477434#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4472166#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4475123#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4475124#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4478939#L347 assume !(0 == isFloorCalling_~floorID); 4477864#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4477599#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4478948#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4478949#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4478022#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 4478023#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4478955#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4479676#L2758 assume !(0 != timeShift_~tmp___9~2); 4479677#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 4480498#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4478923#L347-3 assume !(0 == isFloorCalling_~floorID); 4478925#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4476030#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4476031#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4475712#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4475713#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4479021#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4479022#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4480484#L2546 assume !(1 == ~currentHeading~0); 4480478#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4480471#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4480472#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4479840#L347-25 assume !(0 == isFloorCalling_~floorID); 4479842#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4479874#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4479875#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4479860#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4479859#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4479843#L347-26 assume !(0 == isFloorCalling_~floorID); 4479845#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4479872#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4479873#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4479855#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4479857#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 4479152#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4479153#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4483988#L2758-1 assume !(0 != timeShift_~tmp___9~2); 4483987#L2849-3 assume !(1 == ~doorState~0); 4483986#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4483984#L347-29 assume !(0 == isFloorCalling_~floorID); 4483982#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4483979#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4483978#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4483976#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4483977#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4484555#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4483643#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4483645#L2546-3 assume !(1 == ~currentHeading~0); 4483631#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4483597#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4483582#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4483583#L347-51 assume !(0 == isFloorCalling_~floorID); 4483577#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4483575#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4483567#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4483568#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4483557#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4483558#L347-52 assume !(0 == isFloorCalling_~floorID); 4483551#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4483549#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4483544#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4483545#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4483539#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 4483540#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4487234#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4487232#L2758-2 assume !(0 != timeShift_~tmp___9~2); 4487231#L2849-6 assume !(1 == ~doorState~0); 4487230#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4487228#L347-55 assume !(0 == isFloorCalling_~floorID); 4487226#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4487223#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4487222#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4487220#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4487221#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4488071#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4487959#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4487928#L2546-6 assume !(1 == ~currentHeading~0); 4487191#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4487173#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4487168#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4486847#L347-77 assume !(0 == isFloorCalling_~floorID); 4486849#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4487158#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4487159#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4487148#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4487147#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4487141#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 4487136#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4487125#L618-1 assume 0 == initPersonOnFloor_~floor; 4487126#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4486841#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4486842#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4486777#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4486778#L347-78 assume !(0 == isFloorCalling_~floorID); 4486772#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4486769#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4486764#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4486765#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4486759#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 4486760#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4506000#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4512972#L2758-3 assume !(0 != timeShift_~tmp___9~2); 4512971#L2849-9 assume !(1 == ~doorState~0); 4512970#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4485482#L347-81 assume !(0 == isFloorCalling_~floorID); 4485480#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4485478#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4483586#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4483587#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4508420#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4508417#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4508413#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4508415#L2546-9 assume !(1 == ~currentHeading~0); 4508397#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4508386#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4514027#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4512916#L347-103 assume !(0 == isFloorCalling_~floorID); 4512918#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4525069#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4525067#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4525063#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4525061#L941-7 cleanup_~i~2 := 0; 4525059#L1129-2 assume !false; 4525060#L1130 [2018-11-23 14:15:25,597 INFO L796 eck$LassoCheckResult]: Loop: 4525060#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 4537393#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 4537389#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 4537390#L1137 assume 1 != cleanup_~tmp___0~3; 4537477#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4537355#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4537356#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 4537339#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4537334#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 4536149#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 4536150#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4533009#L347-109 assume !(0 == isFloorCalling_~floorID); 4533011#L351-109 assume !(1 == isFloorCalling_~floorID); 4532994#L355-109 assume !(2 == isFloorCalling_~floorID); 4532995#L359-109 assume !(3 == isFloorCalling_~floorID); 4532990#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4532991#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4534281#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4534282#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4533005#L347-111 assume !(0 == isFloorCalling_~floorID); 4533007#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4532998#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 4532999#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4532984#L1954-9 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4532981#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 4532972#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 4532974#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4537455#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4537453#L2758-4 assume !(0 != timeShift_~tmp___9~2); 4537452#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 4537451#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4537450#L347-112 assume !(0 == isFloorCalling_~floorID); 4537449#L351-112 assume !(1 == isFloorCalling_~floorID); 4537448#L355-112 assume !(2 == isFloorCalling_~floorID); 4537447#L359-112 assume !(3 == isFloorCalling_~floorID); 4537442#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4537443#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4540880#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4540878#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4540876#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4540873#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4540870#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4540871#L2546-12 assume !(1 == ~currentHeading~0); 4543297#L2556-36 assume !(0 == ~currentFloorID~0); 4538246#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4537497#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4537421#L347-134 assume !(0 == isFloorCalling_~floorID); 4537423#L351-134 assume !(1 == isFloorCalling_~floorID); 4537417#L355-134 assume !(2 == isFloorCalling_~floorID); 4537418#L359-134 assume !(3 == isFloorCalling_~floorID); 4537413#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4537414#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4537406#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4537407#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4537397#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 4537396#L1129-2 assume !false; 4525060#L1130 [2018-11-23 14:15:25,601 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:25,601 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 2 times [2018-11-23 14:15:25,601 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:25,602 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:25,602 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:25,602 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:15:25,602 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:25,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:25,707 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:25,707 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:25,707 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:15:25,708 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:15:25,708 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:25,708 INFO L82 PathProgramCache]: Analyzing trace with hash -1565384474, now seen corresponding path program 1 times [2018-11-23 14:15:25,708 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:25,708 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:25,708 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:25,709 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:15:25,709 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:25,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:25,737 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:25,737 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:25,737 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 14:15:25,737 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:15:25,738 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 14:15:25,738 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 14:15:25,738 INFO L87 Difference]: Start difference. First operand 118737 states and 213192 transitions. cyclomatic complexity: 94508 Second operand 5 states. [2018-11-23 14:15:30,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:15:30,736 INFO L93 Difference]: Finished difference Result 509564 states and 912528 transitions. [2018-11-23 14:15:30,736 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 14:15:30,736 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 509564 states and 912528 transitions. [2018-11-23 14:15:32,669 INFO L131 ngComponentsAnalysis]: Automaton has 86 accepting balls. 156008 [2018-11-23 14:15:33,711 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 509564 states to 508544 states and 911120 transitions. [2018-11-23 14:15:33,711 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 383887 [2018-11-23 14:15:33,909 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 383887 [2018-11-23 14:15:33,910 INFO L73 IsDeterministic]: Start isDeterministic. Operand 508544 states and 911120 transitions. [2018-11-23 14:15:33,957 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:15:33,957 INFO L705 BuchiCegarLoop]: Abstraction has 508544 states and 911120 transitions. [2018-11-23 14:15:34,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508544 states and 911120 transitions. [2018-11-23 14:15:36,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508544 to 178901. [2018-11-23 14:15:36,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 178901 states. [2018-11-23 14:15:36,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 178901 states to 178901 states and 320074 transitions. [2018-11-23 14:15:36,795 INFO L728 BuchiCegarLoop]: Abstraction has 178901 states and 320074 transitions. [2018-11-23 14:15:36,796 INFO L608 BuchiCegarLoop]: Abstraction has 178901 states and 320074 transitions. [2018-11-23 14:15:36,796 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-11-23 14:15:36,796 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 178901 states and 320074 transitions. [2018-11-23 14:15:37,088 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 57733 [2018-11-23 14:15:37,088 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:15:37,088 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:15:37,090 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:37,090 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:37,091 INFO L794 eck$LassoCheckResult]: Stem: 5104295#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5104296#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 5103677#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5103091#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 5103092#L1323 assume 0 != main_~tmp~11; 5100984#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5100985#L85 assume !(0 == getOrigin_~person); 5105719#L89 assume !(1 == getOrigin_~person); 5105519#L93 assume !(2 == getOrigin_~person); 5105520#L97 assume !(3 == getOrigin_~person); 5106784#L101 assume !(4 == getOrigin_~person); 5104384#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5104308#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5104309#L618 assume 0 == initPersonOnFloor_~floor; 5105676#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5100481#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5103398#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5103399#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5107093#L347 assume !(0 == isFloorCalling_~floorID); 5106107#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5104319#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5104320#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5107094#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5107095#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5107084#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5107086#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5109652#L2758 assume !(0 != timeShift_~tmp___9~2); 5109653#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 5110754#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5110751#L347-3 assume !(0 == isFloorCalling_~floorID); 5110746#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5110721#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5110712#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5110691#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5110689#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5110688#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5110686#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5110687#L2546 assume !(1 == ~currentHeading~0); 5110905#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5110904#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5111815#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5111813#L347-25 assume !(0 == isFloorCalling_~floorID); 5111812#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5111808#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5111806#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5111802#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5111800#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5111798#L347-26 assume !(0 == isFloorCalling_~floorID); 5111796#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5111792#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5111791#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5111789#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5111788#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5111786#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5111787#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5112517#L2758-1 assume !(0 != timeShift_~tmp___9~2); 5112514#L2849-3 assume !(1 == ~doorState~0); 5112506#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5112499#L347-29 assume !(0 == isFloorCalling_~floorID); 5112453#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5112449#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5112420#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5112417#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5112418#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5112416#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5112408#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5112409#L2546-3 assume !(1 == ~currentHeading~0); 5109762#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5109740#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5108491#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5108479#L347-51 assume !(0 == isFloorCalling_~floorID); 5108475#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5108468#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5108465#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5108459#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5108456#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5108454#L347-52 assume !(0 == isFloorCalling_~floorID); 5108451#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5108448#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5108447#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5108261#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5108260#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5108258#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5108257#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5108255#L2758-2 assume !(0 != timeShift_~tmp___9~2); 5108254#L2849-6 assume !(1 == ~doorState~0); 5108253#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5108251#L347-55 assume !(0 == isFloorCalling_~floorID); 5107940#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5107804#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5107803#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5107801#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5107792#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5107790#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5107787#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5107761#L2546-6 assume !(1 == ~currentHeading~0); 5107755#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5107741#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5107658#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5107656#L347-77 assume !(0 == isFloorCalling_~floorID); 5107654#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5107651#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5107649#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5107645#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5107643#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5107642#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 5107634#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5107632#L618-1 assume 0 == initPersonOnFloor_~floor; 5107602#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5107599#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5107600#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5143288#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5143286#L347-78 assume !(0 == isFloorCalling_~floorID); 5143284#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5143281#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5143278#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5143276#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5143274#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5143270#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5143265#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5143263#L2758-3 assume !(0 != timeShift_~tmp___9~2); 5143262#L2849-9 assume !(1 == ~doorState~0); 5143261#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5143242#L347-81 assume !(0 == isFloorCalling_~floorID); 5143179#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5143175#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5143174#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5143131#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5143127#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5143125#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5143120#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5142886#L2546-9 assume !(1 == ~currentHeading~0); 5142885#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5142832#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5142827#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5144644#L347-103 assume !(0 == isFloorCalling_~floorID); 5144643#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5144639#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5144638#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5144633#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5144631#L941-7 cleanup_~i~2 := 0; 5144627#L1129-2 assume !false; 5144628#L1130 [2018-11-23 14:15:37,091 INFO L796 eck$LassoCheckResult]: Loop: 5144628#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 5202648#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 5202647#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 5202642#L1137 assume 1 != cleanup_~tmp___0~3; 5202641#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202636#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202634#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 5202523#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 5202480#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5202478#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 5202472#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202445#L347-109 assume !(0 == isFloorCalling_~floorID); 5202440#L351-109 assume !(1 == isFloorCalling_~floorID); 5202441#L355-109 assume !(2 == isFloorCalling_~floorID); 5202442#L359-109 assume !(3 == isFloorCalling_~floorID); 5202438#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202439#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5202469#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5202428#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202429#L347-111 assume !(0 == isFloorCalling_~floorID); 5202278#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202273#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 5202271#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5202270#L1954-9 assume !(0 == buttonForFloorIsPressed_~floorID); 5202269#L1958-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5202265#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 5202263#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 5202262#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5202261#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5202259#L2758-4 assume !(0 != timeShift_~tmp___9~2); 5202258#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 5202257#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202255#L347-112 assume !(0 == isFloorCalling_~floorID); 5202254#L351-112 assume !(1 == isFloorCalling_~floorID); 5202253#L355-112 assume !(2 == isFloorCalling_~floorID); 5202252#L359-112 assume !(3 == isFloorCalling_~floorID); 5202246#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202247#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5204570#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5204568#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5204566#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5204530#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5204528#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5204529#L2546-12 assume !(1 == ~currentHeading~0); 5206017#L2556-36 assume !(0 == ~currentFloorID~0); 5203520#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5202617#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202613#L347-134 assume !(0 == isFloorCalling_~floorID); 5202569#L351-134 assume !(1 == isFloorCalling_~floorID); 5202570#L355-134 assume !(2 == isFloorCalling_~floorID); 5202572#L359-134 assume !(3 == isFloorCalling_~floorID); 5202567#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202568#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5202657#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5202652#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5202650#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 5202649#L1129-2 assume !false; 5144628#L1130 [2018-11-23 14:15:37,094 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:37,095 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 3 times [2018-11-23 14:15:37,095 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:37,095 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:37,095 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:37,095 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:15:37,095 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:37,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:37,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:37,172 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:37,172 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:15:37,172 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:15:37,172 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:37,173 INFO L82 PathProgramCache]: Analyzing trace with hash -1394209878, now seen corresponding path program 1 times [2018-11-23 14:15:37,173 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:37,173 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:37,173 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:37,173 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:15:37,173 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:37,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:37,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:37,203 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:37,203 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 14:15:37,203 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:15:37,203 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 14:15:37,203 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 14:15:37,203 INFO L87 Difference]: Start difference. First operand 178901 states and 320074 transitions. cyclomatic complexity: 141249 Second operand 5 states. [2018-11-23 14:15:40,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:15:40,036 INFO L93 Difference]: Finished difference Result 576199 states and 1027905 transitions. [2018-11-23 14:15:40,037 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 14:15:40,037 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 576199 states and 1027905 transitions. [2018-11-23 14:15:44,762 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 192249 [2018-11-23 14:15:45,911 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 576199 states to 576199 states and 1027905 transitions. [2018-11-23 14:15:45,911 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 437351 [2018-11-23 14:15:46,111 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 437351 [2018-11-23 14:15:46,111 INFO L73 IsDeterministic]: Start isDeterministic. Operand 576199 states and 1027905 transitions. [2018-11-23 14:15:46,170 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:15:46,170 INFO L705 BuchiCegarLoop]: Abstraction has 576199 states and 1027905 transitions. [2018-11-23 14:15:46,398 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576199 states and 1027905 transitions. [2018-11-23 14:15:48,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576199 to 179369. [2018-11-23 14:15:48,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 179369 states. [2018-11-23 14:15:48,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179369 states to 179369 states and 320500 transitions. [2018-11-23 14:15:48,730 INFO L728 BuchiCegarLoop]: Abstraction has 179369 states and 320500 transitions. [2018-11-23 14:15:48,730 INFO L608 BuchiCegarLoop]: Abstraction has 179369 states and 320500 transitions. [2018-11-23 14:15:48,730 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-11-23 14:15:48,730 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 179369 states and 320500 transitions. [2018-11-23 14:15:49,031 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 57828 [2018-11-23 14:15:49,031 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:15:49,031 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:15:49,032 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:49,033 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:49,033 INFO L794 eck$LassoCheckResult]: Stem: 5859322#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5859323#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 5858724#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5858169#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 5858170#L1323 assume 0 != main_~tmp~11; 5856107#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5856108#L85 assume !(0 == getOrigin_~person); 5860695#L89 assume !(1 == getOrigin_~person); 5860511#L93 assume !(2 == getOrigin_~person); 5860512#L97 assume !(3 == getOrigin_~person); 5861744#L101 assume !(4 == getOrigin_~person); 5859408#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5859334#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5859335#L618 assume 0 == initPersonOnFloor_~floor; 5860657#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5855607#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5858470#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5855372#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5855373#L347 assume !(0 == isFloorCalling_~floorID); 5862046#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5862051#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5862052#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5862047#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5862048#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5862039#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5862041#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5864754#L2758 assume !(0 != timeShift_~tmp___9~2); 5864755#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 5860151#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5860152#L347-3 assume !(0 == isFloorCalling_~floorID); 5862124#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5862120#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5862101#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5862102#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5861206#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5859819#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5859612#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5859614#L2546 assume !(1 == ~currentHeading~0); 5867160#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5867152#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5867153#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5866183#L347-25 assume !(0 == isFloorCalling_~floorID); 5866185#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5873495#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5873494#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5866169#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5866165#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5866163#L347-26 assume !(0 == isFloorCalling_~floorID); 5866164#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5868531#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5868532#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5868527#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5868528#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5866138#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5866139#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5891427#L2758-1 assume !(0 != timeShift_~tmp___9~2); 5891392#L2849-3 assume !(1 == ~doorState~0); 5891393#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5868533#L347-29 assume !(0 == isFloorCalling_~floorID); 5868535#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5891846#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5891845#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5891843#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5891841#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5891788#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5891603#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5891579#L2546-3 assume !(1 == ~currentHeading~0); 5891520#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5891518#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5891060#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5886671#L347-51 assume !(0 == isFloorCalling_~floorID); 5886673#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5886662#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5886663#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5886502#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5886501#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5886484#L347-52 assume !(0 == isFloorCalling_~floorID); 5886485#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5886476#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5886477#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5886472#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5886473#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5886467#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5886469#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5886462#L2758-2 assume !(0 != timeShift_~tmp___9~2); 5886463#L2849-6 assume !(1 == ~doorState~0); 5886458#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5886459#L347-55 assume !(0 == isFloorCalling_~floorID); 5886455#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5886452#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5886427#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5886428#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5891242#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5891087#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5891065#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5891066#L2546-6 assume !(1 == ~currentHeading~0); 5896614#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5893463#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5886637#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5886638#L347-77 assume !(0 == isFloorCalling_~floorID); 5886632#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5886575#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5886524#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5886525#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5920059#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5920058#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 5920052#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5920050#L618-1 assume 0 == initPersonOnFloor_~floor; 5871246#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5871241#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5871242#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5871113#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5871108#L347-78 assume !(0 == isFloorCalling_~floorID); 5871110#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5871092#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5871093#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5871082#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5871084#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5871056#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5871058#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5927517#L2758-3 assume !(0 != timeShift_~tmp___9~2); 5871031#L2849-9 assume !(1 == ~doorState~0); 5870951#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5870952#L347-81 assume !(0 == isFloorCalling_~floorID); 5932764#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5932760#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5932759#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5932757#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5932755#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5932638#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5932457#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5932288#L2546-9 assume !(1 == ~currentHeading~0); 5932266#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5932003#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5922190#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5922188#L347-103 assume !(0 == isFloorCalling_~floorID); 5922187#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5922178#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5922175#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5922170#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5922166#L941-7 cleanup_~i~2 := 0; 5922162#L1129-2 assume !false; 5922163#L1130 [2018-11-23 14:15:49,033 INFO L796 eck$LassoCheckResult]: Loop: 5922163#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 6009840#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 6009837#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 6009836#L1137 assume 1 != cleanup_~tmp___0~3; 6009835#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6009822#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6009823#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 6009039#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 6009028#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 6009020#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 5971030#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5971031#L347-109 assume !(0 == isFloorCalling_~floorID); 5970434#L351-109 assume !(1 == isFloorCalling_~floorID); 5970435#L355-109 assume !(2 == isFloorCalling_~floorID); 5970438#L359-109 assume !(3 == isFloorCalling_~floorID); 5970439#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5984897#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5992879#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5992878#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5992877#L347-111 assume !(0 == isFloorCalling_~floorID); 5984892#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5984888#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 5984887#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5984886#L1954-9 assume !(0 == buttonForFloorIsPressed_~floorID); 5984885#L1958-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5984881#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 5984879#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 5984878#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5984869#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5984861#L2758-4 assume !(0 != timeShift_~tmp___9~2); 5984852#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 5984796#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5973240#L347-112 assume !(0 == isFloorCalling_~floorID); 5973241#L351-112 assume !(1 == isFloorCalling_~floorID); 5973236#L355-112 assume !(2 == isFloorCalling_~floorID); 5973237#L359-112 assume !(3 == isFloorCalling_~floorID); 5973232#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5973233#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5973254#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5973255#L2489-8 assume !(0 != stopRequestedInDirection_~tmp___0~7);stopRequestedInDirection__wrappee__base_#in~dir, stopRequestedInDirection__wrappee__base_#in~respectFloorCalls, stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_#res;havoc stopRequestedInDirection__wrappee__base_#t~ret66, stopRequestedInDirection__wrappee__base_#t~ret67, stopRequestedInDirection__wrappee__base_#t~ret68, stopRequestedInDirection__wrappee__base_#t~ret69, stopRequestedInDirection__wrappee__base_#t~ret70, stopRequestedInDirection__wrappee__base_#t~ret71, stopRequestedInDirection__wrappee__base_#t~ret72, stopRequestedInDirection__wrappee__base_#t~ret73, stopRequestedInDirection__wrappee__base_#t~ret74, stopRequestedInDirection__wrappee__base_#t~ret75, stopRequestedInDirection__wrappee__base_#t~ret76, stopRequestedInDirection__wrappee__base_~dir, stopRequestedInDirection__wrappee__base_~respectFloorCalls, stopRequestedInDirection__wrappee__base_~respectInLiftCalls, stopRequestedInDirection__wrappee__base_~retValue_acc~21, stopRequestedInDirection__wrappee__base_~tmp~17, stopRequestedInDirection__wrappee__base_~tmp___0~6, stopRequestedInDirection__wrappee__base_~tmp___1~5, stopRequestedInDirection__wrappee__base_~tmp___2~3, stopRequestedInDirection__wrappee__base_~tmp___3~1, stopRequestedInDirection__wrappee__base_~tmp___4~0, stopRequestedInDirection__wrappee__base_~tmp___5~0, stopRequestedInDirection__wrappee__base_~tmp___6~0, stopRequestedInDirection__wrappee__base_~tmp___7~0, stopRequestedInDirection__wrappee__base_~tmp___8~0, stopRequestedInDirection__wrappee__base_~tmp___9~0;stopRequestedInDirection__wrappee__base_~dir := stopRequestedInDirection__wrappee__base_#in~dir;stopRequestedInDirection__wrappee__base_~respectFloorCalls := stopRequestedInDirection__wrappee__base_#in~respectFloorCalls;stopRequestedInDirection__wrappee__base_~respectInLiftCalls := stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__base_~tmp~17;havoc stopRequestedInDirection__wrappee__base_~tmp___0~6;havoc stopRequestedInDirection__wrappee__base_~tmp___1~5;havoc stopRequestedInDirection__wrappee__base_~tmp___2~3;havoc stopRequestedInDirection__wrappee__base_~tmp___3~1;havoc stopRequestedInDirection__wrappee__base_~tmp___4~0;havoc stopRequestedInDirection__wrappee__base_~tmp___5~0;havoc stopRequestedInDirection__wrappee__base_~tmp___6~0;havoc stopRequestedInDirection__wrappee__base_~tmp___7~0;havoc stopRequestedInDirection__wrappee__base_~tmp___8~0;havoc stopRequestedInDirection__wrappee__base_~tmp___9~0; 5984794#L2141-8 assume 1 == stopRequestedInDirection__wrappee__base_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 5984793#L921-20 stopRequestedInDirection__wrappee__base_#t~ret66 := isTopFloor_#res;stopRequestedInDirection__wrappee__base_~tmp~17 := stopRequestedInDirection__wrappee__base_#t~ret66;havoc stopRequestedInDirection__wrappee__base_#t~ret66; 5973201#L2145-8 assume 0 != stopRequestedInDirection__wrappee__base_~tmp~17;stopRequestedInDirection__wrappee__base_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__base_#res := stopRequestedInDirection__wrappee__base_~retValue_acc~21; 5973166#L2463-8 stopRequestedInDirection_#t~ret79 := stopRequestedInDirection__wrappee__base_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5973149#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5973145#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5973146#L2546-12 assume !(1 == ~currentHeading~0); 5998058#L2556-36 assume !(0 == ~currentFloorID~0); 5992187#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5991930#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5991923#L347-134 assume !(0 == isFloorCalling_~floorID); 5991924#L351-134 assume !(1 == isFloorCalling_~floorID); 5991920#L355-134 assume !(2 == isFloorCalling_~floorID); 5991921#L359-134 assume !(3 == isFloorCalling_~floorID); 5991915#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5991916#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6009918#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6009914#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6009912#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 6009909#L1129-2 assume !false; 5922163#L1130 [2018-11-23 14:15:49,040 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:49,041 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 4 times [2018-11-23 14:15:49,041 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:49,041 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:49,041 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:49,041 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:15:49,041 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:49,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:49,112 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:49,112 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:49,112 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:15:49,113 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:15:49,113 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:49,113 INFO L82 PathProgramCache]: Analyzing trace with hash 1035554732, now seen corresponding path program 1 times [2018-11-23 14:15:49,113 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:49,113 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:49,114 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:49,114 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:15:49,114 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:49,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:49,136 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:49,136 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:49,136 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 14:15:49,136 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:15:49,136 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 14:15:49,136 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 14:15:49,137 INFO L87 Difference]: Start difference. First operand 179369 states and 320500 transitions. cyclomatic complexity: 141207 Second operand 5 states. [2018-11-23 14:15:51,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:15:51,113 INFO L93 Difference]: Finished difference Result 439044 states and 779270 transitions. [2018-11-23 14:15:51,113 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 14:15:51,113 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 439044 states and 779270 transitions. [2018-11-23 14:15:52,325 INFO L131 ngComponentsAnalysis]: Automaton has 112 accepting balls. 153911 [2018-11-23 14:15:53,302 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 439044 states to 439044 states and 779270 transitions. [2018-11-23 14:15:53,302 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 329232 [2018-11-23 14:15:54,396 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 329232 [2018-11-23 14:15:54,396 INFO L73 IsDeterministic]: Start isDeterministic. Operand 439044 states and 779270 transitions. [2018-11-23 14:15:54,396 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:15:54,396 INFO L705 BuchiCegarLoop]: Abstraction has 439044 states and 779270 transitions. [2018-11-23 14:15:54,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439044 states and 779270 transitions. [2018-11-23 14:15:55,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439044 to 179874. [2018-11-23 14:15:55,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 179874 states. [2018-11-23 14:15:56,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179874 states to 179874 states and 320974 transitions. [2018-11-23 14:15:56,061 INFO L728 BuchiCegarLoop]: Abstraction has 179874 states and 320974 transitions. [2018-11-23 14:15:56,061 INFO L608 BuchiCegarLoop]: Abstraction has 179874 states and 320974 transitions. [2018-11-23 14:15:56,061 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-11-23 14:15:56,061 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 179874 states and 320974 transitions. [2018-11-23 14:15:56,366 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 57895 [2018-11-23 14:15:56,366 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:15:56,366 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:15:56,367 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:56,368 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:15:56,368 INFO L794 eck$LassoCheckResult]: Stem: 6477959#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6477960#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 6477326#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 6476725#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 6476726#L1323 assume 0 != main_~tmp~11; 6474572#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6474573#L85 assume !(0 == getOrigin_~person); 6479418#L89 assume !(1 == getOrigin_~person); 6479219#L93 assume !(2 == getOrigin_~person); 6479220#L97 assume !(3 == getOrigin_~person); 6480541#L101 assume !(4 == getOrigin_~person); 6478044#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 6477971#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6477972#L618 assume 0 == initPersonOnFloor_~floor; 6479375#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6474052#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6477040#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6477041#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6480870#L347 assume !(0 == isFloorCalling_~floorID); 6479809#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6479540#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6480885#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6480881#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6479944#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6479945#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6480880#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6480927#L2758 assume !(0 != timeShift_~tmp___9~2); 6481054#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 6485575#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6485573#L347-3 assume !(0 == isFloorCalling_~floorID); 6485572#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6485569#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6481040#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6481041#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6480956#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6480957#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6480948#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6480949#L2546 assume !(1 == ~currentHeading~0); 6485808#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6485802#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6485511#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6485512#L347-25 assume !(0 == isFloorCalling_~floorID); 6537698#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6485956#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6485957#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6485942#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6483878#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6483879#L347-26 assume !(0 == isFloorCalling_~floorID); 6479924#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6478998#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6483883#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6483884#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6555747#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6555741#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6555738#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6555734#L2758-1 assume !(0 != timeShift_~tmp___9~2); 6555731#L2849-3 assume !(1 == ~doorState~0); 6555719#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6555715#L347-29 assume !(0 == isFloorCalling_~floorID); 6555710#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6555691#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6555670#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6555664#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6555655#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6555307#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6555301#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6555227#L2546-3 assume !(1 == ~currentHeading~0); 6555151#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6555149#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6554449#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6554447#L347-51 assume !(0 == isFloorCalling_~floorID); 6554445#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6554442#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6554441#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6554380#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6541658#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6541659#L347-52 assume !(0 == isFloorCalling_~floorID); 6544539#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6544536#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6544535#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6544533#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6544532#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6544529#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6544531#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6556219#L2758-2 assume !(0 != timeShift_~tmp___9~2); 6556208#L2849-6 assume !(1 == ~doorState~0); 6555960#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6555958#L347-55 assume !(0 == isFloorCalling_~floorID); 6555956#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6555953#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6555951#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6555943#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6555877#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6555876#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6555874#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6555873#L2546-6 assume !(1 == ~currentHeading~0); 6555872#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6555856#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6555849#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6555847#L347-77 assume !(0 == isFloorCalling_~floorID); 6555845#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6555842#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6555841#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6555836#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6555834#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6555833#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 6555827#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6555826#L618-1 assume 0 == initPersonOnFloor_~floor; 6555793#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6555791#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6555790#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6551196#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6551187#L347-78 assume !(0 == isFloorCalling_~floorID); 6551185#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6551181#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6551180#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6551178#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6551177#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6551174#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6551176#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6593007#L2758-3 assume !(0 != timeShift_~tmp___9~2); 6593004#L2849-9 assume !(1 == ~doorState~0); 6592998#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6592989#L347-81 assume !(0 == isFloorCalling_~floorID); 6592975#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6592963#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6592946#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6592770#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6592584#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6592580#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6592572#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6592521#L2546-9 assume !(1 == ~currentHeading~0); 6592446#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6592444#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6591744#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6591742#L347-103 assume !(0 == isFloorCalling_~floorID); 6591741#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6591737#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6591736#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6591731#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6591729#L941-7 cleanup_~i~2 := 0; 6591721#L1129-2 assume !false; 6559724#L1130 [2018-11-23 14:15:56,368 INFO L796 eck$LassoCheckResult]: Loop: 6559724#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 6559723#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 6559722#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 6559721#L1137 assume 1 != cleanup_~tmp___0~3; 6559720#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6559718#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6559719#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 6559688#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 6559682#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 6559681#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 6527925#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6527922#L347-109 assume !(0 == isFloorCalling_~floorID); 6519649#L351-109 assume !(1 == isFloorCalling_~floorID); 6519650#L355-109 assume !(2 == isFloorCalling_~floorID); 6519651#L359-109 assume !(3 == isFloorCalling_~floorID); 6519647#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6519648#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6523953#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6523921#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6523917#L347-111 assume !(0 == isFloorCalling_~floorID); 6519693#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6519679#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 6519652#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 6519646#L1954-9 assume !(0 == buttonForFloorIsPressed_~floorID); 6519644#L1958-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 6519635#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 6519602#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 6519587#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6519573#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6519562#L2758-4 assume !(0 != timeShift_~tmp___9~2); 6519556#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 6519548#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6519542#L347-112 assume !(0 == isFloorCalling_~floorID); 6519519#L351-112 assume !(1 == isFloorCalling_~floorID); 6519520#L355-112 assume !(2 == isFloorCalling_~floorID); 6519523#L359-112 assume !(3 == isFloorCalling_~floorID); 6519517#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6519518#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6542140#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6542068#L2489-8 assume !(0 != stopRequestedInDirection_~tmp___0~7);stopRequestedInDirection__wrappee__base_#in~dir, stopRequestedInDirection__wrappee__base_#in~respectFloorCalls, stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_#res;havoc stopRequestedInDirection__wrappee__base_#t~ret66, stopRequestedInDirection__wrappee__base_#t~ret67, stopRequestedInDirection__wrappee__base_#t~ret68, stopRequestedInDirection__wrappee__base_#t~ret69, stopRequestedInDirection__wrappee__base_#t~ret70, stopRequestedInDirection__wrappee__base_#t~ret71, stopRequestedInDirection__wrappee__base_#t~ret72, stopRequestedInDirection__wrappee__base_#t~ret73, stopRequestedInDirection__wrappee__base_#t~ret74, stopRequestedInDirection__wrappee__base_#t~ret75, stopRequestedInDirection__wrappee__base_#t~ret76, stopRequestedInDirection__wrappee__base_~dir, stopRequestedInDirection__wrappee__base_~respectFloorCalls, stopRequestedInDirection__wrappee__base_~respectInLiftCalls, stopRequestedInDirection__wrappee__base_~retValue_acc~21, stopRequestedInDirection__wrappee__base_~tmp~17, stopRequestedInDirection__wrappee__base_~tmp___0~6, stopRequestedInDirection__wrappee__base_~tmp___1~5, stopRequestedInDirection__wrappee__base_~tmp___2~3, stopRequestedInDirection__wrappee__base_~tmp___3~1, stopRequestedInDirection__wrappee__base_~tmp___4~0, stopRequestedInDirection__wrappee__base_~tmp___5~0, stopRequestedInDirection__wrappee__base_~tmp___6~0, stopRequestedInDirection__wrappee__base_~tmp___7~0, stopRequestedInDirection__wrappee__base_~tmp___8~0, stopRequestedInDirection__wrappee__base_~tmp___9~0;stopRequestedInDirection__wrappee__base_~dir := stopRequestedInDirection__wrappee__base_#in~dir;stopRequestedInDirection__wrappee__base_~respectFloorCalls := stopRequestedInDirection__wrappee__base_#in~respectFloorCalls;stopRequestedInDirection__wrappee__base_~respectInLiftCalls := stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__base_~tmp~17;havoc stopRequestedInDirection__wrappee__base_~tmp___0~6;havoc stopRequestedInDirection__wrappee__base_~tmp___1~5;havoc stopRequestedInDirection__wrappee__base_~tmp___2~3;havoc stopRequestedInDirection__wrappee__base_~tmp___3~1;havoc stopRequestedInDirection__wrappee__base_~tmp___4~0;havoc stopRequestedInDirection__wrappee__base_~tmp___5~0;havoc stopRequestedInDirection__wrappee__base_~tmp___6~0;havoc stopRequestedInDirection__wrappee__base_~tmp___7~0;havoc stopRequestedInDirection__wrappee__base_~tmp___8~0;havoc stopRequestedInDirection__wrappee__base_~tmp___9~0; 6542061#L2141-8 assume !(1 == stopRequestedInDirection__wrappee__base_~dir); 6542062#L2310-8 assume !(0 == ~currentFloorID~0); 6542127#L2316-8 assume !(~currentFloorID~0 > 0); 6481446#L2331-8 assume ~currentFloorID~0 > 0; 6542043#L2333-8 assume 0 != stopRequestedInDirection__wrappee__base_~respectInLiftCalls; 6541981#L2334-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__base_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__base_#res := stopRequestedInDirection__wrappee__base_~retValue_acc~21; 6541974#L2463-8 stopRequestedInDirection_#t~ret79 := stopRequestedInDirection__wrappee__base_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6541898#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6541899#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6552240#L2546-12 assume !(1 == ~currentHeading~0); 6552237#L2556-36 assume !(0 == ~currentFloorID~0); 6552230#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6552215#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6552213#L347-134 assume !(0 == isFloorCalling_~floorID); 6552153#L351-134 assume !(1 == isFloorCalling_~floorID); 6552154#L355-134 assume !(2 == isFloorCalling_~floorID); 6552156#L359-134 assume !(3 == isFloorCalling_~floorID); 6552151#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6552152#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6607104#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6607096#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6606402#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 6559725#L1129-2 assume !false; 6559724#L1130 [2018-11-23 14:15:56,376 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:56,376 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 5 times [2018-11-23 14:15:56,377 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:56,377 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:56,377 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:56,377 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:15:56,377 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:56,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:56,414 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:56,414 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:56,414 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:15:56,415 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:15:56,415 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:15:56,415 INFO L82 PathProgramCache]: Analyzing trace with hash 714769979, now seen corresponding path program 1 times [2018-11-23 14:15:56,415 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:15:56,415 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:15:56,416 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:56,416 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:15:56,416 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:15:56,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:15:56,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:15:56,480 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:15:56,480 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 14:15:56,481 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 14:15:56,481 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 14:15:56,481 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 14:15:56,481 INFO L87 Difference]: Start difference. First operand 179874 states and 320974 transitions. cyclomatic complexity: 141176 Second operand 4 states. [2018-11-23 14:15:58,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:15:58,862 INFO L93 Difference]: Finished difference Result 308689 states and 548916 transitions. [2018-11-23 14:15:58,863 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 14:15:58,863 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 308689 states and 548916 transitions. [2018-11-23 14:15:59,656 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 96965 [2018-11-23 14:16:00,302 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 308689 states to 308497 states and 548724 transitions. [2018-11-23 14:16:00,302 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 232909 [2018-11-23 14:16:00,434 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 232909 [2018-11-23 14:16:00,434 INFO L73 IsDeterministic]: Start isDeterministic. Operand 308497 states and 548724 transitions. [2018-11-23 14:16:00,441 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-23 14:16:00,441 INFO L705 BuchiCegarLoop]: Abstraction has 308497 states and 548724 transitions. [2018-11-23 14:16:00,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308497 states and 548724 transitions. [2018-11-23 14:16:06,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308497 to 246994. [2018-11-23 14:16:06,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 246994 states. [2018-11-23 14:16:06,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246994 states to 246994 states and 438350 transitions. [2018-11-23 14:16:06,666 INFO L728 BuchiCegarLoop]: Abstraction has 246994 states and 438350 transitions. [2018-11-23 14:16:06,666 INFO L608 BuchiCegarLoop]: Abstraction has 246994 states and 438350 transitions. [2018-11-23 14:16:06,666 INFO L442 BuchiCegarLoop]: ======== Iteration 18============ [2018-11-23 14:16:06,666 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 246994 states and 438350 transitions. [2018-11-23 14:16:07,103 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 80767 [2018-11-23 14:16:07,103 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 14:16:07,103 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 14:16:07,105 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:16:07,105 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 14:16:07,105 INFO L794 eck$LassoCheckResult]: Stem: 6966579#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(10);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6966580#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 6965937#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 6965310#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 6965311#L1323 assume 0 != main_~tmp~11; 6963135#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6963136#L85 assume !(0 == getOrigin_~person); 6968032#L89 assume !(1 == getOrigin_~person); 6967826#L93 assume !(2 == getOrigin_~person); 6967827#L97 assume !(3 == getOrigin_~person); 6969207#L101 assume !(4 == getOrigin_~person); 6966669#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 6966590#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6966591#L618 assume 0 == initPersonOnFloor_~floor; 6967982#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6962621#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6965641#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6962372#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6962373#L347 assume !(0 == isFloorCalling_~floorID); 6968422#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6968158#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6969560#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6969561#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6968576#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6968577#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6969679#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6970323#L2758 assume !(0 != timeShift_~tmp___9~2); 6970322#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 6970321#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6970319#L347-3 assume !(0 == isFloorCalling_~floorID); 6970320#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6969635#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6969636#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6969626#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6969627#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6969585#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6969586#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6969578#L2546 assume !(1 == ~currentHeading~0); 6967961#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6967962#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6969541#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6969542#L347-25 assume !(0 == isFloorCalling_~floorID); 6968556#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6966263#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6965895#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6965425#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6962639#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6965427#L347-26 assume !(0 == isFloorCalling_~floorID); 6968557#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6967613#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6970227#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6970224#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6970221#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6970217#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6970218#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6978290#L2758-1 assume !(0 != timeShift_~tmp___9~2); 6978289#L2849-3 assume !(1 == ~doorState~0); 6978288#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6978286#L347-29 assume !(0 == isFloorCalling_~floorID); 6977699#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6977693#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6977691#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6977688#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6977670#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6977457#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6977437#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6977365#L2546-3 assume !(1 == ~currentHeading~0); 6977358#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6977309#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6977300#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6989187#L347-51 assume !(0 == isFloorCalling_~floorID); 6989182#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6989180#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6989175#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6989176#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6994801#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6994799#L347-52 assume !(0 == isFloorCalling_~floorID); 6994796#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6994793#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6994792#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6994189#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6994190#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6996026#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6996028#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6994028#L2758-2 assume !(0 != timeShift_~tmp___9~2); 6994029#L2849-6 assume !(1 == ~doorState~0); 6994024#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6994025#L347-55 assume !(0 == isFloorCalling_~floorID); 6994013#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6994008#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6994052#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6997476#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6997477#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6999800#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6994111#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6994112#L2546-6 assume !(1 == ~currentHeading~0); 7001866#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6993778#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6993758#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6993759#L347-77 assume !(0 == isFloorCalling_~floorID); 6993753#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6993750#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6993749#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6993744#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6993741#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6993742#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 7025830#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7025829#L618-1 assume 0 == initPersonOnFloor_~floor; 6993689#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6993688#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6993682#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6993680#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6985721#L347-78 assume !(0 == isFloorCalling_~floorID); 6985722#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7018745#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7018746#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 7018729#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7018731#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 7018715#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 7018717#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 7042100#L2758-3 assume !(0 != timeShift_~tmp___9~2); 7042099#L2849-9 assume !(1 == ~doorState~0); 7029109#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7029105#L347-81 assume !(0 == isFloorCalling_~floorID); 7029106#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7041871#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7041870#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 7031786#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7031787#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 7032017#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 7032018#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 7041846#L2546-9 assume !(1 == ~currentHeading~0); 7041843#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7041839#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7034592#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7034590#L347-103 assume !(0 == isFloorCalling_~floorID); 7034589#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7034585#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7034583#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 7034577#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 7034576#L941-7 cleanup_~i~2 := 0; 7034570#L1129-2 assume !false; 7034571#L1130 [2018-11-23 14:16:07,105 INFO L796 eck$LassoCheckResult]: Loop: 7034571#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 7148963#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 7148962#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 7148282#L1137 assume 1 != cleanup_~tmp___0~3; 7148281#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7148279#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7148280#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 7138356#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 7138349#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 7133069#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 7133070#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7132999#L347-109 assume !(0 == isFloorCalling_~floorID); 7133001#L351-109 assume !(1 == isFloorCalling_~floorID); 7132932#L355-109 assume !(2 == isFloorCalling_~floorID); 7132933#L359-109 assume !(3 == isFloorCalling_~floorID); 7132928#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7132929#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7146519#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 7144700#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7144701#L347-111 assume !(0 == isFloorCalling_~floorID); 7143345#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7143327#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 7143284#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 7142941#L1954-9 assume !(0 == buttonForFloorIsPressed_~floorID); 7142942#L1958-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 7143054#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 7143052#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 7143051#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 7143050#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 7143048#L2758-4 assume !(0 != timeShift_~tmp___9~2); 7143047#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 7143046#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7143045#L347-112 assume !(0 == isFloorCalling_~floorID); 7143044#L351-112 assume !(1 == isFloorCalling_~floorID); 7143043#L355-112 assume !(2 == isFloorCalling_~floorID); 7143042#L359-112 assume !(3 == isFloorCalling_~floorID); 7143041#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7143040#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7143038#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 7143032#L2489-8 assume !(0 != stopRequestedInDirection_~tmp___0~7);stopRequestedInDirection__wrappee__base_#in~dir, stopRequestedInDirection__wrappee__base_#in~respectFloorCalls, stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_#res;havoc stopRequestedInDirection__wrappee__base_#t~ret66, stopRequestedInDirection__wrappee__base_#t~ret67, stopRequestedInDirection__wrappee__base_#t~ret68, stopRequestedInDirection__wrappee__base_#t~ret69, stopRequestedInDirection__wrappee__base_#t~ret70, stopRequestedInDirection__wrappee__base_#t~ret71, stopRequestedInDirection__wrappee__base_#t~ret72, stopRequestedInDirection__wrappee__base_#t~ret73, stopRequestedInDirection__wrappee__base_#t~ret74, stopRequestedInDirection__wrappee__base_#t~ret75, stopRequestedInDirection__wrappee__base_#t~ret76, stopRequestedInDirection__wrappee__base_~dir, stopRequestedInDirection__wrappee__base_~respectFloorCalls, stopRequestedInDirection__wrappee__base_~respectInLiftCalls, stopRequestedInDirection__wrappee__base_~retValue_acc~21, stopRequestedInDirection__wrappee__base_~tmp~17, stopRequestedInDirection__wrappee__base_~tmp___0~6, stopRequestedInDirection__wrappee__base_~tmp___1~5, stopRequestedInDirection__wrappee__base_~tmp___2~3, stopRequestedInDirection__wrappee__base_~tmp___3~1, stopRequestedInDirection__wrappee__base_~tmp___4~0, stopRequestedInDirection__wrappee__base_~tmp___5~0, stopRequestedInDirection__wrappee__base_~tmp___6~0, stopRequestedInDirection__wrappee__base_~tmp___7~0, stopRequestedInDirection__wrappee__base_~tmp___8~0, stopRequestedInDirection__wrappee__base_~tmp___9~0;stopRequestedInDirection__wrappee__base_~dir := stopRequestedInDirection__wrappee__base_#in~dir;stopRequestedInDirection__wrappee__base_~respectFloorCalls := stopRequestedInDirection__wrappee__base_#in~respectFloorCalls;stopRequestedInDirection__wrappee__base_~respectInLiftCalls := stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__base_~tmp~17;havoc stopRequestedInDirection__wrappee__base_~tmp___0~6;havoc stopRequestedInDirection__wrappee__base_~tmp___1~5;havoc stopRequestedInDirection__wrappee__base_~tmp___2~3;havoc stopRequestedInDirection__wrappee__base_~tmp___3~1;havoc stopRequestedInDirection__wrappee__base_~tmp___4~0;havoc stopRequestedInDirection__wrappee__base_~tmp___5~0;havoc stopRequestedInDirection__wrappee__base_~tmp___6~0;havoc stopRequestedInDirection__wrappee__base_~tmp___7~0;havoc stopRequestedInDirection__wrappee__base_~tmp___8~0;havoc stopRequestedInDirection__wrappee__base_~tmp___9~0; 7143030#L2141-8 assume !(1 == stopRequestedInDirection__wrappee__base_~dir); 7143031#L2310-8 assume !(0 == ~currentFloorID~0); 7143090#L2316-8 assume ~currentFloorID~0 > 0; 7143088#L2317-8 assume 0 != stopRequestedInDirection__wrappee__base_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7122558#L347-118 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7143020#L374-118 stopRequestedInDirection__wrappee__base_#t~ret72 := isFloorCalling_#res;stopRequestedInDirection__wrappee__base_~tmp___9~0 := stopRequestedInDirection__wrappee__base_#t~ret72;havoc stopRequestedInDirection__wrappee__base_#t~ret72; 7142953#L2321-8 assume 0 != stopRequestedInDirection__wrappee__base_~tmp___9~0;stopRequestedInDirection__wrappee__base_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__base_#res := stopRequestedInDirection__wrappee__base_~retValue_acc~21; 7142944#L2463-8 stopRequestedInDirection_#t~ret79 := stopRequestedInDirection__wrappee__base_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 7142830#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 7142831#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 7149532#L2546-12 assume !(1 == ~currentHeading~0); 7149292#L2556-36 assume !(0 == ~currentFloorID~0); 7147220#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7146546#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7146543#L347-134 assume !(0 == isFloorCalling_~floorID); 7145489#L351-134 assume !(1 == isFloorCalling_~floorID); 7145490#L355-134 assume !(2 == isFloorCalling_~floorID); 7145492#L359-134 assume !(3 == isFloorCalling_~floorID); 7145487#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7145488#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7148970#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 7148966#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 7148964#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 7126242#L1129-2 assume !false; 7034571#L1130 [2018-11-23 14:16:07,114 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:16:07,114 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 6 times [2018-11-23 14:16:07,114 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:16:07,114 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:16:07,115 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:16:07,115 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 14:16:07,115 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:16:07,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:16:07,184 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:16:07,184 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 14:16:07,184 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 14:16:07,185 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 14:16:07,185 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:16:07,185 INFO L82 PathProgramCache]: Analyzing trace with hash 1762555511, now seen corresponding path program 1 times [2018-11-23 14:16:07,185 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 14:16:07,185 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 14:16:07,185 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:16:07,186 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 14:16:07,186 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 14:16:07,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 14:16:07,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 14:16:08,153 WARN L180 SmtUtils]: Spent 941.00 ms on a formula simplification. DAG size of input: 243 DAG size of output: 198 [2018-11-23 14:16:08,531 WARN L180 SmtUtils]: Spent 374.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 148 [2018-11-23 14:16:08,535 INFO L216 LassoAnalysis]: Preferences: [2018-11-23 14:16:08,535 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-23 14:16:08,535 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-23 14:16:08,535 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-23 14:16:08,536 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-23 14:16:08,536 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:16:08,536 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-23 14:16:08,536 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-23 14:16:08,536 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03_true-unreach-call_true-termination.cil.c_Iteration18_Loop [2018-11-23 14:16:08,536 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-23 14:16:08,536 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-23 14:16:08,540 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,552 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,559 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,560 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,561 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,562 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,563 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,564 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,565 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,566 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,567 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,568 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,569 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,569 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,580 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,587 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,595 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,597 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,598 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,599 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,601 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,602 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,603 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,604 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,605 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,606 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,607 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,608 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,609 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,610 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,610 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,611 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,612 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,613 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,614 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,615 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,616 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,617 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,621 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,623 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,624 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,625 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,626 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,627 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,628 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,629 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,630 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,631 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,632 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,633 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,636 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,636 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,637 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,642 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,646 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,646 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,647 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,648 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,654 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,669 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,675 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,678 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,679 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,685 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,687 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,690 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,699 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,739 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,740 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:08,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,141 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-23 14:16:09,141 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:16:09,150 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 14:16:09,150 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_80714cbf-422f-4a9e-ac2f-ff75ed310207/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:16:09,168 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-23 14:16:09,168 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 14:16:09,693 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-23 14:16:09,694 INFO L216 LassoAnalysis]: Preferences: [2018-11-23 14:16:09,694 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-23 14:16:09,695 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-23 14:16:09,695 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-23 14:16:09,695 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-23 14:16:09,695 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 14:16:09,695 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-23 14:16:09,695 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-23 14:16:09,695 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03_true-unreach-call_true-termination.cil.c_Iteration18_Loop [2018-11-23 14:16:09,695 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-23 14:16:09,695 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-23 14:16:09,698 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,735 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,736 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,737 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,739 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,833 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,852 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,853 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,898 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:09,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 14:16:10,309 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-23 14:16:10,309 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-23 14:16:10,309 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:16:10,309 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:16:10,310 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:16:10,310 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:16:10,310 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:16:10,310 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:16:10,310 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:16:10,310 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:16:10,310 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 14:16:10,311 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 14:16:10,311 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 14:16:10,311 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 14:16:10,311 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 14:16:10,311 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 14:16:10,311 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 14:16:10,311 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 14:16:10,311 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 14:16:10,313 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-23 14:16:10,315 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-23 14:16:10,315 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-23 14:16:10,316 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-23 14:16:10,316 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-23 14:16:10,316 INFO L518 LassoAnalysis]: Proved termination. [2018-11-23 14:16:10,316 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2018-11-23 14:16:10,316 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-23 14:16:10,344 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 14:16:10,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:16:10,467 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 14:16:10,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 14:16:10,514 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 14:16:10,539 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 14:16:10,540 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 4 loop predicates [2018-11-23 14:16:10,540 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 246994 states and 438350 transitions. cyclomatic complexity: 191455 Second operand 5 states. [2018-11-23 14:16:11,716 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 246994 states and 438350 transitions. cyclomatic complexity: 191455. Second operand 5 states. Result 397228 states and 704823 transitions. Complement of second has 8 states. [2018-11-23 14:16:11,717 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-23 14:16:11,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 14:16:11,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 9146 transitions. [2018-11-23 14:16:11,722 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9146 transitions. Stem has 142 letters. Loop has 64 letters. [2018-11-23 14:16:11,723 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 14:16:11,723 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9146 transitions. Stem has 206 letters. Loop has 64 letters. [2018-11-23 14:16:11,723 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 14:16:11,723 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9146 transitions. Stem has 142 letters. Loop has 128 letters. [2018-11-23 14:16:11,724 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 14:16:11,724 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 397228 states and 704823 transitions. [2018-11-23 14:16:13,312 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-23 14:16:13,313 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 397228 states to 0 states and 0 transitions. [2018-11-23 14:16:13,313 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-23 14:16:13,313 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-23 14:16:13,313 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-23 14:16:13,313 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 14:16:13,313 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 14:16:13,313 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 14:16:13,313 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 14:16:13,313 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 14:16:13,314 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 6 states. [2018-11-23 14:16:13,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 14:16:13,314 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-23 14:16:13,314 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-23 14:16:13,314 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-23 14:16:13,314 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-23 14:16:13,314 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-23 14:16:13,314 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-23 14:16:13,314 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-23 14:16:13,315 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-23 14:16:13,315 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 14:16:13,315 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 14:16:13,315 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 14:16:13,315 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 14:16:13,315 INFO L442 BuchiCegarLoop]: ======== Iteration 19============ [2018-11-23 14:16:13,315 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-23 14:16:13,315 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-23 14:16:13,315 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-23 14:16:13,322 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 23.11 02:16:13 BoogieIcfgContainer [2018-11-23 14:16:13,322 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-23 14:16:13,323 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 14:16:13,323 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 14:16:13,323 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 14:16:13,323 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:13:32" (3/4) ... [2018-11-23 14:16:13,327 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 14:16:13,327 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 14:16:13,328 INFO L168 Benchmark]: Toolchain (without parser) took 167405.37 ms. Allocated memory was 1.0 GB in the beginning and 7.1 GB in the end (delta: 6.1 GB). Free memory was 956.4 MB in the beginning and 4.1 GB in the end (delta: -3.1 GB). Peak memory consumption was 3.0 GB. Max. memory is 11.5 GB. [2018-11-23 14:16:13,329 INFO L168 Benchmark]: CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 14:16:13,329 INFO L168 Benchmark]: CACSL2BoogieTranslator took 584.95 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.0 MB). Free memory was 956.4 MB in the beginning and 1.1 GB in the end (delta: -164.6 MB). Peak memory consumption was 55.5 MB. Max. memory is 11.5 GB. [2018-11-23 14:16:13,330 INFO L168 Benchmark]: Boogie Procedure Inliner took 171.05 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 51.0 MB). Peak memory consumption was 51.0 MB. Max. memory is 11.5 GB. [2018-11-23 14:16:13,330 INFO L168 Benchmark]: Boogie Preprocessor took 176.87 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 54.4 MB). Peak memory consumption was 54.4 MB. Max. memory is 11.5 GB. [2018-11-23 14:16:13,331 INFO L168 Benchmark]: RCFGBuilder took 5464.59 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 197.1 MB). Free memory was 1.0 GB in the beginning and 988.5 MB in the end (delta: 27.2 MB). Peak memory consumption was 433.4 MB. Max. memory is 11.5 GB. [2018-11-23 14:16:13,332 INFO L168 Benchmark]: BuchiAutomizer took 161000.19 ms. Allocated memory was 1.4 GB in the beginning and 7.1 GB in the end (delta: 5.7 GB). Free memory was 988.5 MB in the beginning and 4.1 GB in the end (delta: -3.1 GB). Peak memory consumption was 2.6 GB. Max. memory is 11.5 GB. [2018-11-23 14:16:13,332 INFO L168 Benchmark]: Witness Printer took 4.81 ms. Allocated memory is still 7.1 GB. Free memory is still 4.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 14:16:13,335 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 584.95 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.0 MB). Free memory was 956.4 MB in the beginning and 1.1 GB in the end (delta: -164.6 MB). Peak memory consumption was 55.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 171.05 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 51.0 MB). Peak memory consumption was 51.0 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 176.87 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 54.4 MB). Peak memory consumption was 54.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 5464.59 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 197.1 MB). Free memory was 1.0 GB in the beginning and 988.5 MB in the end (delta: 27.2 MB). Peak memory consumption was 433.4 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 161000.19 ms. Allocated memory was 1.4 GB in the beginning and 7.1 GB in the end (delta: 5.7 GB). Free memory was 988.5 MB in the beginning and 4.1 GB in the end (delta: -3.1 GB). Peak memory consumption was 2.6 GB. Max. memory is 11.5 GB. * Witness Printer took 4.81 ms. Allocated memory is still 7.1 GB. Free memory is still 4.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 20 terminating modules (18 trivial, 2 deterministic, 0 nondeterministic). One deterministic module has affine ranking function currentFloorID and consists of 14 locations. One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 18 modules have a trivial ranking function, the largest among these consists of 9 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 160.9s and 19 iterations. TraceHistogramMax:1. Analysis of lassos took 10.5s. Construction of modules took 34.1s. Büchi inclusion checks took 37.0s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 14. Automata minimization 39.2s AutomataMinimizationTime, 18 MinimizatonAttempts, 3220748 StatesRemovedByMinimization, 18 NontrivialMinimizations. Non-live state removal took 32.4s Buchi closure took 2.9s. Biggest automaton had 246994 states and ocurred in iteration 17. Nontrivial modules had stage [2, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 382278 SDtfs, 1132983 SDslu, 1206357 SDs, 0 SdLazy, 87063 SolverSat, 10035 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 34.1s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI16 SILT2 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf100 lsp16 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf1054 smp54 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 5ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 19 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 2 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 3.2s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...