./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product19_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product19_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7081c0762c221e2c23313e8cd77b3fddf82a21d6 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-22 22:22:24,571 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-22 22:22:24,572 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-22 22:22:24,582 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-22 22:22:24,582 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-22 22:22:24,583 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-22 22:22:24,584 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-22 22:22:24,585 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-22 22:22:24,587 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-22 22:22:24,588 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-22 22:22:24,588 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-22 22:22:24,589 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-22 22:22:24,589 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-22 22:22:24,590 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-22 22:22:24,591 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-22 22:22:24,592 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-22 22:22:24,592 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-22 22:22:24,594 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-22 22:22:24,595 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-22 22:22:24,597 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-22 22:22:24,598 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-22 22:22:24,599 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-22 22:22:24,600 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-22 22:22:24,601 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-22 22:22:24,601 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-22 22:22:24,602 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-22 22:22:24,602 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-22 22:22:24,603 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-22 22:22:24,604 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-22 22:22:24,605 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-22 22:22:24,605 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-22 22:22:24,605 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-22 22:22:24,606 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-22 22:22:24,606 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-22 22:22:24,607 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-22 22:22:24,607 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-22 22:22:24,608 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-22 22:22:24,621 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-22 22:22:24,621 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-22 22:22:24,622 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-22 22:22:24,622 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-22 22:22:24,623 INFO L133 SettingsManager]: * Use SBE=true [2018-11-22 22:22:24,623 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-22 22:22:24,623 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-22 22:22:24,623 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-22 22:22:24,623 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-22 22:22:24,623 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-22 22:22:24,623 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-22 22:22:24,624 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-22 22:22:24,625 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-22 22:22:24,625 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-22 22:22:24,625 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-22 22:22:24,625 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-22 22:22:24,625 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-22 22:22:24,625 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-22 22:22:24,626 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-22 22:22:24,626 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-22 22:22:24,627 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-22 22:22:24,627 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-22 22:22:24,627 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-22 22:22:24,628 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-22 22:22:24,628 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-22 22:22:24,628 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-22 22:22:24,628 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-22 22:22:24,628 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-22 22:22:24,628 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-22 22:22:24,629 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-22 22:22:24,629 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-22 22:22:24,629 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-22 22:22:24,630 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7081c0762c221e2c23313e8cd77b3fddf82a21d6 [2018-11-22 22:22:24,657 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-22 22:22:24,667 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-22 22:22:24,670 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-22 22:22:24,672 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-22 22:22:24,672 INFO L276 PluginConnector]: CDTParser initialized [2018-11-22 22:22:24,673 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product19_true-unreach-call_true-termination.cil.c [2018-11-22 22:22:24,717 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/data/eb8abb250/febc425fec2d48a3aa62f95724e3ca66/FLAGdddc52328 [2018-11-22 22:22:25,192 INFO L307 CDTParser]: Found 1 translation units. [2018-11-22 22:22:25,193 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/sv-benchmarks/c/product-lines/elevator_spec14_product19_true-unreach-call_true-termination.cil.c [2018-11-22 22:22:25,204 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/data/eb8abb250/febc425fec2d48a3aa62f95724e3ca66/FLAGdddc52328 [2018-11-22 22:22:25,694 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/data/eb8abb250/febc425fec2d48a3aa62f95724e3ca66 [2018-11-22 22:22:25,697 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-22 22:22:25,698 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-22 22:22:25,698 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-22 22:22:25,698 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-22 22:22:25,701 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-22 22:22:25,701 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:22:25" (1/1) ... [2018-11-22 22:22:25,703 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1b51e347 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:25, skipping insertion in model container [2018-11-22 22:22:25,703 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:22:25" (1/1) ... [2018-11-22 22:22:25,710 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-22 22:22:25,751 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-22 22:22:26,131 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:22:26,139 INFO L191 MainTranslator]: Completed pre-run [2018-11-22 22:22:26,210 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:22:26,237 INFO L195 MainTranslator]: Completed translation [2018-11-22 22:22:26,238 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26 WrapperNode [2018-11-22 22:22:26,238 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-22 22:22:26,238 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-22 22:22:26,239 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-22 22:22:26,239 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-22 22:22:26,244 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,262 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,407 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-22 22:22:26,407 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-22 22:22:26,408 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-22 22:22:26,408 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-22 22:22:26,414 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,414 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,434 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,434 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,488 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,543 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,559 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... [2018-11-22 22:22:26,599 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-22 22:22:26,600 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-22 22:22:26,600 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-22 22:22:26,600 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-22 22:22:26,601 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:22:26,648 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-22 22:22:26,649 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-22 22:22:26,649 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-22 22:22:26,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-22 22:22:32,468 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-22 22:22:32,468 INFO L280 CfgBuilder]: Removed 1383 assue(true) statements. [2018-11-22 22:22:32,468 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:22:32 BoogieIcfgContainer [2018-11-22 22:22:32,468 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-22 22:22:32,469 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-22 22:22:32,469 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-22 22:22:32,472 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-22 22:22:32,473 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-22 22:22:32,473 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 22.11 10:22:25" (1/3) ... [2018-11-22 22:22:32,474 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@57e11b10 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.11 10:22:32, skipping insertion in model container [2018-11-22 22:22:32,474 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-22 22:22:32,474 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:22:26" (2/3) ... [2018-11-22 22:22:32,475 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@57e11b10 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.11 10:22:32, skipping insertion in model container [2018-11-22 22:22:32,475 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-22 22:22:32,475 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:22:32" (3/3) ... [2018-11-22 22:22:32,476 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product19_true-unreach-call_true-termination.cil.c [2018-11-22 22:22:32,513 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-22 22:22:32,514 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-22 22:22:32,514 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-22 22:22:32,514 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-22 22:22:32,514 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-22 22:22:32,514 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-22 22:22:32,514 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-22 22:22:32,514 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-22 22:22:32,514 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-22 22:22:32,581 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5902 states. [2018-11-22 22:22:32,686 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1198 [2018-11-22 22:22:32,686 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 22:22:32,686 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 22:22:32,701 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:32,701 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:32,701 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-22 22:22:32,701 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5902 states. [2018-11-22 22:22:32,811 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1198 [2018-11-22 22:22:32,812 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 22:22:32,812 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 22:22:32,815 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:32,816 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:32,824 INFO L794 eck$LassoCheckResult]: Stem: 3636#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4870#L-1true havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 5872#L2122true havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 5318#L2130true main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 1941#L2596true assume 0 != main_~tmp~26; 3818#L2573true havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 454#L2178true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 4760#L2203true bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2369#L2963true assume 0 == initPersonOnFloor_~floor; 2536#L2964true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1254#L3071-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3504#L2755true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3893#L2767-2true havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1511#L2692true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1252#L2719true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5#L1568true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 97#L952true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3790#L283true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1169#L956true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4971#L969true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1449#L1105true assume !(0 != timeShift_~tmp___9~2); 2918#L1196true assume !(1 == ~doorState~0); 2925#L1196-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1515#L2692-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1240#L2719-3true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7#L1568-1true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1725#L835true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3788#L283-1true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2759#L848true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2096#L1204true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5636#L892true assume !(1 == ~currentHeading~0); 3688#L902true assume !(0 == ~currentFloorID~0); 3674#L902-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3377#L908-5true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3011#L2692-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1194#L2719-25true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 122#L1568-3true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5472#L1687true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5476#L1687-1true havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3021#L2692-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1195#L2719-26true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 124#L1568-4true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 100#L952-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3808#L283-4true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1170#L956-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4973#L969-1true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1455#L1105-1true assume !(0 != timeShift_~tmp___9~2); 2880#L1196-3true assume !(1 == ~doorState~0); 2891#L1196-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2983#L2692-29true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1183#L2719-29true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 126#L1568-5true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1731#L835-2true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3806#L283-5true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2740#L848-2true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2099#L1204-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5618#L892-3true assume !(1 == ~currentHeading~0); 3666#L902-9true assume !(0 == ~currentFloorID~0); 3670#L902-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3368#L908-11true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2895#L2692-51true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1058#L2719-51true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113#L1568-7true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5477#L1687-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5447#L1687-3true havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2904#L2692-52true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1055#L2719-52true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 115#L1568-8true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 102#L952-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3765#L283-8true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1172#L956-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4975#L969-2true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1457#L1105-2true assume !(0 != timeShift_~tmp___9~2); 2897#L1196-6true assume !(1 == ~doorState~0); 2852#L1196-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2859#L2692-55true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1045#L2719-55true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 116#L1568-9true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1738#L835-4true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3763#L283-9true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2744#L848-4true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2104#L1204-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5625#L892-6true assume !(1 == ~currentHeading~0); 3634#L902-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3638#L902-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3358#L908-17true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3128#L2692-77true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1138#L2719-77true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 118#L1568-11true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5449#L1687-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5454#L1687-5true havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 463#L2178-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 4762#L2203-1true bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2379#L2963-1true assume 0 == initPersonOnFloor_~floor; 2539#L2964-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1262#L3071-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3511#L2755-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3899#L2767-5true havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3134#L2692-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1139#L2719-78true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 105#L1568-12true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 104#L952-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3753#L283-12true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1164#L956-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4976#L969-3true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1434#L1105-3true assume !(0 != timeShift_~tmp___9~2); 2854#L1196-9true assume !(1 == ~doorState~0); 2863#L1196-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3096#L2692-81true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1131#L2719-81true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 107#L1568-13true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1713#L835-6true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3784#L283-13true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2751#L848-6true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2106#L1204-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5399#L892-9true assume !(1 == ~currentHeading~0); 3631#L902-27true assume !(0 == ~currentFloorID~0); 3608#L902-29true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3343#L908-23true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2727#L2692-103true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1097#L2719-103true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 110#L1568-15true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5456#L1687-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5462#L1687-7true cleanup_~i~3 := 0; 3392#L2405-2true [2018-11-22 22:22:32,826 INFO L796 eck$LassoCheckResult]: Loop: 3392#L2405-2true assume !false; 3353#L2406true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4332#L2409true assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 1768#L130true cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 3992#L2413true assume 1 != cleanup_~tmp___0~11; 3995#L2413-1true havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2732#L2692-104true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1096#L2719-104true anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 3924#L391true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 5213#L455true isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3346#L468true cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1638#L2425true assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2712#L2692-109true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1090#L2719-109true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 111#L1568-16true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 94#L952-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3773#L283-16true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1165#L956-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4977#L969-4true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1435#L1105-4true assume !(0 != timeShift_~tmp___9~2); 2876#L1196-12true assume !(1 == ~doorState~0); 3206#L1196-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2693#L2692-112true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1093#L2719-112true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 112#L1568-17true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1719#L835-8true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3771#L283-17true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2429#L848-8true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2111#L1204-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5407#L892-12true assume !(1 == ~currentHeading~0); 3601#L902-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3603#L902-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4502#L908-29true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2602#L2692-134true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 973#L2719-134true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 98#L1568-19true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5463#L1687-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5437#L1687-9true cleanup_~i~3 := 1 + cleanup_~i~3; 3392#L2405-2true [2018-11-22 22:22:32,842 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:32,842 INFO L82 PathProgramCache]: Analyzing trace with hash -1508658665, now seen corresponding path program 1 times [2018-11-22 22:22:32,844 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:22:32,845 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:22:32,882 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:32,882 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:32,882 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:32,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:33,068 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:22:33,070 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:33,070 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:22:33,074 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 22:22:33,074 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:33,074 INFO L82 PathProgramCache]: Analyzing trace with hash -67339848, now seen corresponding path program 1 times [2018-11-22 22:22:33,074 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:22:33,074 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:22:33,075 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:33,075 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:33,076 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:33,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:33,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:22:33,144 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:33,144 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-22 22:22:33,145 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-22 22:22:33,154 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-22 22:22:33,155 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:22:33,156 INFO L87 Difference]: Start difference. First operand 5902 states. Second operand 7 states. [2018-11-22 22:22:39,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:22:39,015 INFO L93 Difference]: Finished difference Result 50547 states and 94831 transitions. [2018-11-22 22:22:39,015 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-22 22:22:39,016 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50547 states and 94831 transitions. [2018-11-22 22:22:39,197 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 11021 [2018-11-22 22:22:39,390 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50547 states to 50475 states and 94747 transitions. [2018-11-22 22:22:39,391 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50475 [2018-11-22 22:22:39,430 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50475 [2018-11-22 22:22:39,430 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50475 states and 94747 transitions. [2018-11-22 22:22:39,496 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 22:22:39,496 INFO L705 BuchiCegarLoop]: Abstraction has 50475 states and 94747 transitions. [2018-11-22 22:22:39,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50475 states and 94747 transitions. [2018-11-22 22:22:39,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50475 to 17099. [2018-11-22 22:22:39,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17099 states. [2018-11-22 22:22:39,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17099 states to 17099 states and 32080 transitions. [2018-11-22 22:22:39,914 INFO L728 BuchiCegarLoop]: Abstraction has 17099 states and 32080 transitions. [2018-11-22 22:22:39,914 INFO L608 BuchiCegarLoop]: Abstraction has 17099 states and 32080 transitions. [2018-11-22 22:22:39,914 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-22 22:22:39,914 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17099 states and 32080 transitions. [2018-11-22 22:22:39,957 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3495 [2018-11-22 22:22:39,957 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 22:22:39,958 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 22:22:39,960 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:39,960 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:39,961 INFO L794 eck$LassoCheckResult]: Stem: 60972#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 60973#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 62072#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 62379#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 59214#L2596 assume 0 != main_~tmp~26; 59215#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 57341#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 56685#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 59709#L2963 assume 0 == initPersonOnFloor_~floor; 59711#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 56992#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 58366#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 60654#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58628#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58364#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56499#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 56500#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 56743#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 58273#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58275#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 68042#L1105 assume !(0 != timeShift_~tmp___9~2); 68043#L1196 assume !(1 == ~doorState~0); 73146#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73145#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73144#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73143#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 73141#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 73142#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 73150#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 73148#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 73147#L892 assume !(1 == ~currentHeading~0); 61023#L902 assume !(0 == ~currentFloorID~0); 61010#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58027#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60276#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58303#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56802#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 56803#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 63288#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 63287#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 62756#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 63145#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 63028#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 63026#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 63025#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58277#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 69059#L1105-1 assume !(0 != timeShift_~tmp___9~2); 69060#L1196-3 assume !(1 == ~doorState~0); 73471#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73470#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73469#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73468#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 58974#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 58975#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 73467#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 73465#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 73466#L892-3 assume !(1 == ~currentHeading~0); 61003#L902-9 assume !(0 == ~currentFloorID~0); 61004#L902-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58017#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60214#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 60215#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 68062#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 68057#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 64045#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 64038#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 62732#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64021#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 62805#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 62794#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 62783#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58279#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 72914#L1105-2 assume !(0 != timeShift_~tmp___9~2); 72915#L1196-6 assume !(1 == ~doorState~0); 73358#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73357#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73356#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73355#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 58984#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 58985#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 60089#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 59415#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 59417#L892-6 assume !(1 == ~currentHeading~0); 60969#L902-18 assume !(0 == ~currentFloorID~0); 60970#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57988#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 68114#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 62704#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 68113#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 68108#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 68106#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 68104#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 68099#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 68097#L2963-1 assume 0 == initPersonOnFloor_~floor; 68073#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 68068#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 68067#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 63290#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 63289#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 62706#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 63146#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 63034#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 63033#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 63032#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58270#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 71283#L1105-3 assume !(0 != timeShift_~tmp___9~2); 71284#L1196-9 assume !(1 == ~doorState~0); 73233#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73232#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73231#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73230#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 73228#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 61120#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 60096#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 59419#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 59421#L892-9 assume !(1 == ~currentHeading~0); 60966#L902-27 assume !(0 == ~currentFloorID~0); 60943#L902-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 57979#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60074#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58182#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56776#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 56777#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 60809#L1687-7 cleanup_~i~3 := 0; 60680#L2405-2 [2018-11-22 22:22:39,961 INFO L796 eck$LassoCheckResult]: Loop: 60680#L2405-2 assume !false; 60608#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 60609#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 59023#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 59024#L2413 assume 1 != cleanup_~tmp___0~11; 61312#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60078#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58180#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 58181#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 56694#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 60598#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 58826#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58827#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58174#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56778#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 56779#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 62778#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 62728#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58272#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 72247#L1105-4 assume !(0 != timeShift_~tmp___9~2); 72248#L1196-12 assume !(1 == ~doorState~0); 73427#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73426#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73425#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73424#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 73422#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 61107#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 59773#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 59426#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 59428#L892-12 assume !(1 == ~currentHeading~0); 60936#L902-36 assume !(0 == ~currentFloorID~0); 60937#L902-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58001#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 59959#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58005#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56745#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 56746#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 60818#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 60680#L2405-2 [2018-11-22 22:22:39,962 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:39,962 INFO L82 PathProgramCache]: Analyzing trace with hash -1085011943, now seen corresponding path program 1 times [2018-11-22 22:22:39,962 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:22:39,962 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:22:39,967 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:39,967 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:39,967 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:40,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:40,057 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:22:40,057 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:40,057 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:22:40,057 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 22:22:40,057 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:40,058 INFO L82 PathProgramCache]: Analyzing trace with hash -876686474, now seen corresponding path program 1 times [2018-11-22 22:22:40,058 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:22:40,058 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:22:40,058 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:40,059 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:40,059 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:40,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:40,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:22:40,093 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:40,093 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:22:40,093 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-22 22:22:40,093 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:22:40,093 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:22:40,094 INFO L87 Difference]: Start difference. First operand 17099 states and 32080 transitions. cyclomatic complexity: 14983 Second operand 3 states. [2018-11-22 22:22:40,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:22:40,446 INFO L93 Difference]: Finished difference Result 30708 states and 57570 transitions. [2018-11-22 22:22:40,447 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:22:40,447 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30708 states and 57570 transitions. [2018-11-22 22:22:40,686 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6962 [2018-11-22 22:22:40,755 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30708 states to 30708 states and 57570 transitions. [2018-11-22 22:22:40,755 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30708 [2018-11-22 22:22:40,773 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30708 [2018-11-22 22:22:40,774 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30708 states and 57570 transitions. [2018-11-22 22:22:40,792 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 22:22:40,793 INFO L705 BuchiCegarLoop]: Abstraction has 30708 states and 57570 transitions. [2018-11-22 22:22:40,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30708 states and 57570 transitions. [2018-11-22 22:22:41,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30708 to 30676. [2018-11-22 22:22:41,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 30676 states. [2018-11-22 22:22:41,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30676 states to 30676 states and 57522 transitions. [2018-11-22 22:22:41,065 INFO L728 BuchiCegarLoop]: Abstraction has 30676 states and 57522 transitions. [2018-11-22 22:22:41,065 INFO L608 BuchiCegarLoop]: Abstraction has 30676 states and 57522 transitions. [2018-11-22 22:22:41,065 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-22 22:22:41,066 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30676 states and 57522 transitions. [2018-11-22 22:22:41,137 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6954 [2018-11-22 22:22:41,137 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 22:22:41,137 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 22:22:41,140 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:41,140 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:41,141 INFO L794 eck$LassoCheckResult]: Stem: 108799#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 108800#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 109926#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 110231#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 107021#L2596 assume 0 != main_~tmp~26; 107022#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 105156#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 104499#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 107512#L2963 assume 0 == initPersonOnFloor_~floor; 107514#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 104806#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 106184#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 108479#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 106442#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 106182#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104313#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 104314#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 104557#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 106098#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 106100#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 106328#L1105 assume !(0 != timeShift_~tmp___9~2); 106330#L1196 assume !(1 == ~doorState~0); 108050#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 106447#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 106167#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104318#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 104319#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106783#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 108946#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 111785#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 111577#L892 assume !(1 == ~currentHeading~0); 108851#L902 assume !(0 == ~currentFloorID~0); 108838#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108475#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 108103#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 106125#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104615#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 104616#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 108653#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 108108#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 106126#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104620#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 104564#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 104566#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 108963#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 113774#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 113771#L1105-1 assume !(0 != timeShift_~tmp___9~2); 113768#L1196-3 assume !(1 == ~doorState~0); 113748#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 113747#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113746#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113745#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 113743#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 108961#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 107908#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 107211#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 107213#L892-3 assume !(1 == ~currentHeading~0); 108831#L902-9 assume !(0 == ~currentFloorID~0); 108832#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108816#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 117659#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110661#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 117651#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 113932#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 113927#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 113924#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110656#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 115206#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 115203#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113915#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 113912#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 106104#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 106347#L1105-2 assume !(0 != timeShift_~tmp___9~2); 106349#L1196-6 assume !(1 == ~doorState~0); 108003#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 108004#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 105934#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104601#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 104602#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106796#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 107912#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 107220#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 107222#L892-6 assume !(1 == ~currentHeading~0); 108796#L902-18 assume !(0 == ~currentFloorID~0); 108797#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108789#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 120869#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 120867#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 120866#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 120861#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 120859#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 120857#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 120852#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 120851#L2963-1 assume 0 == initPersonOnFloor_~floor; 120821#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 120816#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 120815#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 120810#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 120805#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110638#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 120803#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 120802#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 120801#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 120799#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 120800#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 127082#L1105-3 assume !(0 != timeShift_~tmp___9~2); 127080#L1196-9 assume !(1 == ~doorState~0); 127079#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 127078#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 127077#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 127076#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 127075#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 124551#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 124549#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 124547#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 110297#L892-9 assume !(1 == ~currentHeading~0); 108793#L902-27 assume !(0 == ~currentFloorID~0); 108769#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108759#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 124729#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 119329#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 118552#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 114261#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 114242#L1687-7 cleanup_~i~3 := 0; 114146#L2405-2 [2018-11-22 22:22:41,141 INFO L796 eck$LassoCheckResult]: Loop: 114146#L2405-2 assume !false; 114140#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 114071#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 114068#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 114067#L2413 assume 1 != cleanup_~tmp___0~11; 114066#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 114064#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 114065#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 114008#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 113996#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 113997#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 120558#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 113978#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110646#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113969#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 113964#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113966#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 119196#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 106097#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 106300#L1105-4 assume !(0 != timeShift_~tmp___9~2); 106302#L1196-12 assume !(1 == ~doorState~0); 108019#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 107862#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 105996#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104593#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 104594#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106776#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 119987#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 119985#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 118767#L892-12 assume !(1 == ~currentHeading~0); 118764#L902-36 assume !(0 == ~currentFloorID~0); 118748#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 118741#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 129738#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 119341#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 118593#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 118594#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 114243#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 114146#L2405-2 [2018-11-22 22:22:41,141 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:41,141 INFO L82 PathProgramCache]: Analyzing trace with hash -41972007, now seen corresponding path program 1 times [2018-11-22 22:22:41,142 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:22:41,142 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:22:41,142 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:41,142 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:41,143 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:41,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:41,216 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:22:41,216 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:41,217 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:22:41,217 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 22:22:41,217 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:41,217 INFO L82 PathProgramCache]: Analyzing trace with hash 898320888, now seen corresponding path program 1 times [2018-11-22 22:22:41,217 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:22:41,218 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:22:41,218 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:41,218 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:41,218 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:41,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:41,301 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:22:41,301 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:41,301 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-22 22:22:41,301 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-22 22:22:41,301 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-22 22:22:41,301 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:22:41,302 INFO L87 Difference]: Start difference. First operand 30676 states and 57522 transitions. cyclomatic complexity: 26848 Second operand 8 states. [2018-11-22 22:22:47,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:22:47,283 INFO L93 Difference]: Finished difference Result 297779 states and 560972 transitions. [2018-11-22 22:22:47,283 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-11-22 22:22:47,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 297779 states and 560972 transitions. [2018-11-22 22:22:48,025 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 85500 [2018-11-22 22:22:48,711 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 297779 states to 297779 states and 560972 transitions. [2018-11-22 22:22:48,711 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 297779 [2018-11-22 22:22:53,060 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 297779 [2018-11-22 22:22:53,060 INFO L73 IsDeterministic]: Start isDeterministic. Operand 297779 states and 560972 transitions. [2018-11-22 22:22:53,142 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 22:22:53,142 INFO L705 BuchiCegarLoop]: Abstraction has 297779 states and 560972 transitions. [2018-11-22 22:22:53,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297779 states and 560972 transitions. [2018-11-22 22:22:54,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297779 to 61174. [2018-11-22 22:22:54,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61174 states. [2018-11-22 22:22:54,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61174 states to 61174 states and 114683 transitions. [2018-11-22 22:22:54,141 INFO L728 BuchiCegarLoop]: Abstraction has 61174 states and 114683 transitions. [2018-11-22 22:22:54,141 INFO L608 BuchiCegarLoop]: Abstraction has 61174 states and 114683 transitions. [2018-11-22 22:22:54,142 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-22 22:22:54,142 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 61174 states and 114683 transitions. [2018-11-22 22:22:54,244 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 13784 [2018-11-22 22:22:54,244 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 22:22:54,244 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 22:22:54,246 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:54,246 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:54,247 INFO L794 eck$LassoCheckResult]: Stem: 437615#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 437616#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 438786#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 439119#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 435689#L2596 assume 0 != main_~tmp~26; 435690#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 433685#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 433024#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 436203#L2963 assume 0 == initPersonOnFloor_~floor; 436205#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 433334#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 434775#L2755 assume !(0 == callOnFloor_~floorID); 437265#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 437266#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 437885#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 440375#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 432838#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 432839#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 437781#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 437782#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 442397#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 442395#L1105 assume !(0 != timeShift_~tmp___9~2); 442394#L1196 assume !(1 == ~doorState~0); 442393#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 442392#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 442391#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 442390#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 442388#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 442386#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 442321#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 442309#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 442298#L892 assume !(1 == ~currentHeading~0); 442293#L902 assume !(0 == ~currentFloorID~0); 442287#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 440019#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 440020#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 434706#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 434707#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 440008#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 437455#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 436858#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 436859#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 456852#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 433090#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 433092#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 437799#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 456850#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 456848#L1105-1 assume !(0 != timeShift_~tmp___9~2); 456847#L1196-3 assume !(1 == ~doorState~0); 456846#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 456845#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 456844#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 456843#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 456841#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 456839#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 456835#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 456829#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 456825#L892-3 assume !(1 == ~currentHeading~0); 456823#L902-9 assume !(0 == ~currentFloorID~0); 438939#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 456814#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 451875#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 439547#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 451871#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 451872#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 451863#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 451864#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 434513#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 434514#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 433096#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 433098#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 458078#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 458077#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 458075#L1105-2 assume !(0 != timeShift_~tmp___9~2); 458074#L1196-6 assume !(1 == ~doorState~0); 458072#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 458073#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 458014#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 458015#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 435447#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 435448#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 465968#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 465965#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 465963#L892-6 assume !(1 == ~currentHeading~0); 437612#L902-18 assume !(0 == ~currentFloorID~0); 437613#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 437605#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 465021#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 462519#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 465018#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 465012#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 465010#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 465008#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 465003#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 465001#L2963-1 assume 0 == initPersonOnFloor_~floor; 465002#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 468362#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 468361#L2755-2 assume !(0 == callOnFloor_~floorID); 468358#L2758-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 468356#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 468355#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 464482#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 468354#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 468353#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 468352#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 457432#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 434675#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 471916#L1105-3 assume !(0 != timeShift_~tmp___9~2); 471915#L1196-9 assume !(1 == ~doorState~0); 471914#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 436927#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 436928#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 433109#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 433110#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 437775#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 436626#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 435899#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 435901#L892-9 assume !(1 == ~currentHeading~0); 437609#L902-27 assume !(0 == ~currentFloorID~0); 437585#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 434347#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 474270#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 474271#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 474263#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 474264#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 439240#L1687-7 cleanup_~i~3 := 0; 437293#L2405-2 [2018-11-22 22:22:54,247 INFO L796 eck$LassoCheckResult]: Loop: 437293#L2405-2 assume !false; 437215#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 437216#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 435485#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 435486#L2413 assume 1 != cleanup_~tmp___0~11; 437985#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 473155#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 474181#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 474182#L391 assume !(0 != anyStopRequested_~tmp___3~0); 474169#L395 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 474158#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 490889#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 490888#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 476470#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 476471#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 490868#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 433074#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 433076#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 461381#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 434677#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 491984#L1105-4 assume !(0 != timeShift_~tmp___9~2); 491983#L1196-12 assume !(1 == ~doorState~0); 491982#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 491981#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 491980#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 491979#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 491977#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 491975#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 491973#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 491972#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 439192#L892-12 assume !(1 == ~currentHeading~0); 437577#L902-36 assume !(0 == ~currentFloorID~0); 437578#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 437381#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 436472#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 436473#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 433085#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 433086#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 439218#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 437293#L2405-2 [2018-11-22 22:22:54,247 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:54,247 INFO L82 PathProgramCache]: Analyzing trace with hash 1906137606, now seen corresponding path program 1 times [2018-11-22 22:22:54,247 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:22:54,247 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:22:54,248 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:54,248 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:54,248 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:54,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:54,308 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:22:54,308 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:54,308 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:22:54,309 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 22:22:54,309 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:54,309 INFO L82 PathProgramCache]: Analyzing trace with hash -1896202286, now seen corresponding path program 1 times [2018-11-22 22:22:54,309 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:22:54,309 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:22:54,310 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:54,310 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:54,310 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:22:54,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:54,346 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:22:54,347 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:54,347 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-22 22:22:54,347 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-22 22:22:54,347 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-22 22:22:54,347 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:22:54,347 INFO L87 Difference]: Start difference. First operand 61174 states and 114683 transitions. cyclomatic complexity: 53511 Second operand 8 states. [2018-11-22 22:23:00,419 WARN L180 SmtUtils]: Spent 318.00 ms on a formula simplification that was a NOOP. DAG size: 8 [2018-11-22 22:23:02,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:23:02,874 INFO L93 Difference]: Finished difference Result 354610 states and 664543 transitions. [2018-11-22 22:23:02,874 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-11-22 22:23:02,874 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 354610 states and 664543 transitions. [2018-11-22 22:23:03,808 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 98246 [2018-11-22 22:23:05,238 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 354610 states to 354610 states and 664543 transitions. [2018-11-22 22:23:05,238 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 354610 [2018-11-22 22:23:05,385 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 354610 [2018-11-22 22:23:05,385 INFO L73 IsDeterministic]: Start isDeterministic. Operand 354610 states and 664543 transitions. [2018-11-22 22:23:05,500 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 22:23:05,500 INFO L705 BuchiCegarLoop]: Abstraction has 354610 states and 664543 transitions. [2018-11-22 22:23:05,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 354610 states and 664543 transitions. [2018-11-22 22:23:06,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 354610 to 60633. [2018-11-22 22:23:06,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 60633 states. [2018-11-22 22:23:06,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60633 states to 60633 states and 113644 transitions. [2018-11-22 22:23:06,650 INFO L728 BuchiCegarLoop]: Abstraction has 60633 states and 113644 transitions. [2018-11-22 22:23:06,650 INFO L608 BuchiCegarLoop]: Abstraction has 60633 states and 113644 transitions. [2018-11-22 22:23:06,650 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-22 22:23:06,650 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60633 states and 113644 transitions. [2018-11-22 22:23:06,752 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 13742 [2018-11-22 22:23:06,753 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 22:23:06,753 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 22:23:06,755 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:23:06,756 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:23:06,756 INFO L794 eck$LassoCheckResult]: Stem: 853390#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 853391#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 854546#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 854896#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 851498#L2596 assume 0 != main_~tmp~26; 851499#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 849567#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 848904#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 852007#L2963 assume 0 == initPersonOnFloor_~floor; 852009#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 849216#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 850603#L2755 assume !(0 == callOnFloor_~floorID); 853052#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 853053#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 850877#L2692 assume !(0 == isFloorCalling_~floorID); 850879#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 849742#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 855274#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 855275#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 853551#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 853552#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 863689#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 863685#L1105 assume !(0 != timeShift_~tmp___9~2); 863474#L1196 assume !(1 == ~doorState~0); 863449#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 855320#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 850585#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 848723#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 848724#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 851239#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 866474#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 866469#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 866467#L892 assume !(1 == ~currentHeading~0); 866463#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 866464#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 850258#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 853049#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 864110#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 864108#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 864103#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 864102#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 852652#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 852653#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 864486#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 864485#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 864482#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 864475#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 864472#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 864470#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 864469#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 864467#L1105-1 assume !(0 != timeShift_~tmp___9~2); 864466#L1196-3 assume !(1 == ~doorState~0); 864464#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 864463#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 864460#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 864459#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 864457#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 864455#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 864037#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 864027#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 864015#L892-3 assume !(1 == ~currentHeading~0); 864001#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 863991#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 857147#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 857148#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 860644#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 860645#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 860634#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 860633#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 852565#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 852566#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 883233#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 883232#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 883230#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 883224#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 883207#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 883204#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 883201#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 883197#L1105-2 assume !(0 != timeShift_~tmp___9~2); 883193#L1196-6 assume !(1 == ~doorState~0); 883194#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 883185#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 857187#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 883179#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 883180#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 885986#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 883167#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 883164#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 883142#L892-6 assume !(1 == ~currentHeading~0); 883138#L902-18 assume !(0 == ~currentFloorID~0); 853388#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 853016#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 852736#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 850468#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 849009#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 849010#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 855018#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 849579#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 849407#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 852016#L2963-1 assume 0 == initPersonOnFloor_~floor; 852017#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 848862#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 850614#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 853237#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 855399#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 855396#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 855395#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 855391#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 855390#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 855388#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 850513#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 858840#L1105-3 assume !(0 != timeShift_~tmp___9~2); 858841#L1196-9 assume !(1 == ~doorState~0); 870456#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 869939#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 869940#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 869935#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 869936#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 869929#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 869930#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 869922#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 869143#L892-9 assume !(1 == ~currentHeading~0); 868986#L902-27 assume !(0 == ~currentFloorID~0); 868976#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 863969#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 863970#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 863961#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 863962#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 863957#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 863958#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 863953#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 863954#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 863945#L1687-7 cleanup_~i~3 := 0; 863943#L2405-2 [2018-11-22 22:23:06,757 INFO L796 eck$LassoCheckResult]: Loop: 863943#L2405-2 assume !false; 863944#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 863939#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 863940#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 863935#L2413 assume 1 != cleanup_~tmp___0~11; 863936#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 863931#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 863932#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 863927#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 863928#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 863923#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 863924#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 863915#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 863916#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 863911#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 863912#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 853532#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 853533#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 862348#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 862349#L1105-4 assume !(0 != timeShift_~tmp___9~2); 893730#L1196-12 assume !(1 == ~doorState~0); 893729#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 893728#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 893727#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 893726#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 893724#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 893722#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 893719#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 893714#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 893712#L892-12 assume !(1 == ~currentHeading~0); 892518#L902-36 assume !(0 == ~currentFloorID~0); 892507#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 892501#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 893757#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 893755#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 893754#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 893753#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 893752#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 893751#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 863972#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 863946#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 863943#L2405-2 [2018-11-22 22:23:06,757 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:23:06,757 INFO L82 PathProgramCache]: Analyzing trace with hash 1045817053, now seen corresponding path program 1 times [2018-11-22 22:23:06,759 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:23:06,759 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:23:06,760 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:23:06,760 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:23:06,760 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:23:06,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:23:06,820 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:23:06,821 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:23:06,821 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:23:06,821 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 22:23:06,821 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:23:06,821 INFO L82 PathProgramCache]: Analyzing trace with hash -56707482, now seen corresponding path program 1 times [2018-11-22 22:23:06,821 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:23:06,822 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:23:06,822 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:23:06,822 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:23:06,822 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:23:06,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:23:06,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:23:07,281 WARN L180 SmtUtils]: Spent 423.00 ms on a formula simplification. DAG size of input: 191 DAG size of output: 172 [2018-11-22 22:23:07,820 WARN L180 SmtUtils]: Spent 495.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 121 [2018-11-22 22:23:07,828 INFO L216 LassoAnalysis]: Preferences: [2018-11-22 22:23:07,829 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-22 22:23:07,829 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-22 22:23:07,829 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-22 22:23:07,829 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-22 22:23:07,829 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:07,829 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-22 22:23:07,830 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-22 22:23:07,830 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-22 22:23:07,830 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-22 22:23:07,830 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-22 22:23:07,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,902 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,908 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,915 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,918 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,934 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,937 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,941 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,962 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,978 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,988 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:07,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,008 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,009 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,015 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,026 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,027 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,028 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:08,381 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-22 22:23:08,382 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:08,387 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 22:23:08,387 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 22:23:08,393 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-22 22:23:08,393 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret106=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret106=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:08,411 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 22:23:08,411 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 22:23:08,415 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-22 22:23:08,415 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret153=0} Honda state: {ULTIMATE.start_cleanup_#t~ret153=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:08,431 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 22:23:08,431 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 22:23:08,433 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-22 22:23:08,433 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:08,451 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 22:23:08,451 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 22:23:08,454 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-22 22:23:08,454 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [MP z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forcibly destroying the process No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/z3 [MP z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] The stream was forcibly closed: stdIn Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:08,699 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 22:23:08,699 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 22:23:08,703 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-22 22:23:08,703 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:08,727 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 22:23:08,728 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ad8beef-c169-4afa-a9dc-7caf4c11829b/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:08,745 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-22 22:23:08,745 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 22:23:09,237 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-22 22:23:09,239 INFO L216 LassoAnalysis]: Preferences: [2018-11-22 22:23:09,239 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-22 22:23:09,239 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-22 22:23:09,239 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-22 22:23:09,239 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-22 22:23:09,239 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 22:23:09,239 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-22 22:23:09,239 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-22 22:23:09,239 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-22 22:23:09,239 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-22 22:23:09,239 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-22 22:23:09,243 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,257 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,258 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,260 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,287 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,289 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,318 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,327 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,329 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,330 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,334 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,337 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,338 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,340 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,357 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,363 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,365 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,369 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,382 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,383 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,405 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,408 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,410 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,412 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,414 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 22:23:09,826 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-22 22:23:09,832 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-22 22:23:09,833 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 22:23:09,834 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 22:23:09,834 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 22:23:09,835 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 22:23:09,835 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 22:23:09,835 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 22:23:09,837 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 22:23:09,837 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 22:23:09,839 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-22 22:23:09,839 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 22:23:09,840 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 22:23:09,840 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 22:23:09,840 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 22:23:09,840 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 22:23:09,840 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 22:23:09,841 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 22:23:09,841 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 22:23:09,841 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-22 22:23:09,841 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 22:23:09,842 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 22:23:09,842 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 22:23:09,842 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 22:23:09,842 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 22:23:09,842 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 22:23:09,842 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 22:23:09,843 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 22:23:09,843 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-22 22:23:09,843 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 22:23:09,844 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 22:23:09,844 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 22:23:09,844 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 22:23:09,844 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 22:23:09,844 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 22:23:09,844 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 22:23:09,844 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 22:23:09,845 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-22 22:23:09,845 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 22:23:09,845 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 22:23:09,846 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 22:23:09,846 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 22:23:09,846 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 22:23:09,846 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 22:23:09,846 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 22:23:09,846 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 22:23:09,847 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-22 22:23:09,847 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 22:23:09,847 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 22:23:09,847 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 22:23:09,847 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 22:23:09,848 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 22:23:09,848 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 22:23:09,848 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 22:23:09,848 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 22:23:09,851 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-22 22:23:09,855 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-22 22:23:09,855 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-22 22:23:09,857 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-22 22:23:09,857 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-22 22:23:09,857 INFO L518 LassoAnalysis]: Proved termination. [2018-11-22 22:23:09,857 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-22 22:23:09,858 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-22 22:23:09,900 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:23:10,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:23:10,031 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:23:10,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:23:10,079 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:23:10,132 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:23:10,139 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-22 22:23:10,142 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 60633 states and 113644 transitions. cyclomatic complexity: 53017 Second operand 5 states. [2018-11-22 22:23:10,838 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 60633 states and 113644 transitions. cyclomatic complexity: 53017. Second operand 5 states. Result 74399 states and 139358 transitions. Complement of second has 8 states. [2018-11-22 22:23:10,839 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-22 22:23:10,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-22 22:23:10,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11110 transitions. [2018-11-22 22:23:10,849 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11110 transitions. Stem has 133 letters. Loop has 41 letters. [2018-11-22 22:23:10,851 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-22 22:23:10,851 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11110 transitions. Stem has 174 letters. Loop has 41 letters. [2018-11-22 22:23:10,852 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-22 22:23:10,852 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11110 transitions. Stem has 133 letters. Loop has 82 letters. [2018-11-22 22:23:10,853 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-22 22:23:10,853 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 74399 states and 139358 transitions. [2018-11-22 22:23:11,115 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-22 22:23:11,115 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 74399 states to 0 states and 0 transitions. [2018-11-22 22:23:11,115 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-22 22:23:11,115 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-22 22:23:11,115 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-22 22:23:11,115 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 22:23:11,115 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 22:23:11,116 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 22:23:11,116 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:23:11,116 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:23:11,116 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-11-22 22:23:11,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:23:11,116 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-22 22:23:11,116 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-22 22:23:11,116 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-22 22:23:11,116 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-22 22:23:11,116 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-22 22:23:11,117 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-22 22:23:11,117 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-22 22:23:11,117 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-22 22:23:11,117 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 22:23:11,117 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 22:23:11,117 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 22:23:11,117 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 22:23:11,117 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-22 22:23:11,117 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-22 22:23:11,117 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-22 22:23:11,117 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-22 22:23:11,123 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 22.11 10:23:11 BoogieIcfgContainer [2018-11-22 22:23:11,123 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-22 22:23:11,123 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-22 22:23:11,123 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-22 22:23:11,123 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-22 22:23:11,124 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:22:32" (3/4) ... [2018-11-22 22:23:11,127 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-22 22:23:11,127 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-22 22:23:11,128 INFO L168 Benchmark]: Toolchain (without parser) took 45430.78 ms. Allocated memory was 1.0 GB in the beginning and 5.3 GB in the end (delta: 4.3 GB). Free memory was 957.5 MB in the beginning and 2.9 GB in the end (delta: -1.9 GB). Peak memory consumption was 2.4 GB. Max. memory is 11.5 GB. [2018-11-22 22:23:11,128 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:23:11,129 INFO L168 Benchmark]: CACSL2BoogieTranslator took 540.05 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 177.7 MB). Free memory was 957.5 MB in the beginning and 1.1 GB in the end (delta: -190.5 MB). Peak memory consumption was 57.3 MB. Max. memory is 11.5 GB. [2018-11-22 22:23:11,129 INFO L168 Benchmark]: Boogie Procedure Inliner took 168.83 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 57.8 MB). Peak memory consumption was 57.8 MB. Max. memory is 11.5 GB. [2018-11-22 22:23:11,130 INFO L168 Benchmark]: Boogie Preprocessor took 192.04 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 57.8 MB). Peak memory consumption was 57.8 MB. Max. memory is 11.5 GB. [2018-11-22 22:23:11,130 INFO L168 Benchmark]: RCFGBuilder took 5868.81 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 216.0 MB). Free memory was 1.0 GB in the beginning and 871.3 MB in the end (delta: 161.2 MB). Peak memory consumption was 441.3 MB. Max. memory is 11.5 GB. [2018-11-22 22:23:11,131 INFO L168 Benchmark]: BuchiAutomizer took 38653.85 ms. Allocated memory was 1.4 GB in the beginning and 5.3 GB in the end (delta: 3.9 GB). Free memory was 871.3 MB in the beginning and 2.9 GB in the end (delta: -2.0 GB). Peak memory consumption was 1.9 GB. Max. memory is 11.5 GB. [2018-11-22 22:23:11,131 INFO L168 Benchmark]: Witness Printer took 4.07 ms. Allocated memory is still 5.3 GB. Free memory is still 2.9 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:23:11,134 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 540.05 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 177.7 MB). Free memory was 957.5 MB in the beginning and 1.1 GB in the end (delta: -190.5 MB). Peak memory consumption was 57.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 168.83 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 57.8 MB). Peak memory consumption was 57.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 192.04 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 57.8 MB). Peak memory consumption was 57.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 5868.81 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 216.0 MB). Free memory was 1.0 GB in the beginning and 871.3 MB in the end (delta: 161.2 MB). Peak memory consumption was 441.3 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 38653.85 ms. Allocated memory was 1.4 GB in the beginning and 5.3 GB in the end (delta: 3.9 GB). Free memory was 871.3 MB in the beginning and 2.9 GB in the end (delta: -2.0 GB). Peak memory consumption was 1.9 GB. Max. memory is 11.5 GB. * Witness Printer took 4.07 ms. Allocated memory is still 5.3 GB. Free memory is still 2.9 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 38.6s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 3.8s. Construction of modules took 11.1s. Büchi inclusion checks took 10.5s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 2.8s AutomataMinimizationTime, 4 MinimizatonAttempts, 563990 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 4.7s Buchi closure took 4.5s. Biggest automaton had 61174 states and ocurred in iteration 3. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 90772 SDtfs, 533610 SDslu, 563544 SDs, 0 SdLazy, 25881 SolverSat, 3947 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 11.1s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital176 mio100 ax100 hnf100 lsp21 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq224 hnf86 smp100 dnf150 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 6ms VariablesStem: 0 VariablesLoop: 2 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 5 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.5s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...