./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product27_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 0cd3be1d Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product27_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 20365c9692f242bd46105acd67423fd99416f441 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-0cd3be1 [2018-11-28 10:33:29,756 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-28 10:33:29,757 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-28 10:33:29,765 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-28 10:33:29,765 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-28 10:33:29,765 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-28 10:33:29,766 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-28 10:33:29,767 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-28 10:33:29,768 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-28 10:33:29,769 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-28 10:33:29,769 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-28 10:33:29,770 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-28 10:33:29,770 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-28 10:33:29,771 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-28 10:33:29,772 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-28 10:33:29,772 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-28 10:33:29,773 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-28 10:33:29,774 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-28 10:33:29,775 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-28 10:33:29,776 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-28 10:33:29,777 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-28 10:33:29,778 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-28 10:33:29,779 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-28 10:33:29,779 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-28 10:33:29,780 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-28 10:33:29,780 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-28 10:33:29,781 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-28 10:33:29,781 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-28 10:33:29,782 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-28 10:33:29,783 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-28 10:33:29,783 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-28 10:33:29,783 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-28 10:33:29,783 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-28 10:33:29,784 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-28 10:33:29,784 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-28 10:33:29,785 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-28 10:33:29,785 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-28 10:33:29,795 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-28 10:33:29,795 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-28 10:33:29,796 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-28 10:33:29,796 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-28 10:33:29,797 INFO L133 SettingsManager]: * Use SBE=true [2018-11-28 10:33:29,797 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-28 10:33:29,797 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-28 10:33:29,797 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-28 10:33:29,797 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-28 10:33:29,797 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-28 10:33:29,797 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-28 10:33:29,797 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-28 10:33:29,798 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-28 10:33:29,799 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-28 10:33:29,799 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-28 10:33:29,799 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-28 10:33:29,799 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-28 10:33:29,799 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-28 10:33:29,799 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-28 10:33:29,799 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-28 10:33:29,799 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-28 10:33:29,799 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-28 10:33:29,799 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-28 10:33:29,800 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-28 10:33:29,800 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 20365c9692f242bd46105acd67423fd99416f441 [2018-11-28 10:33:29,824 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-28 10:33:29,833 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-28 10:33:29,835 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-28 10:33:29,836 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-28 10:33:29,837 INFO L276 PluginConnector]: CDTParser initialized [2018-11-28 10:33:29,837 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product27_true-unreach-call_true-termination.cil.c [2018-11-28 10:33:29,878 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/data/63a2f443f/f74a7018af684957bf3215497f6687f6/FLAGbf60d7b16 [2018-11-28 10:33:30,373 INFO L307 CDTParser]: Found 1 translation units. [2018-11-28 10:33:30,374 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/sv-benchmarks/c/product-lines/elevator_spec14_product27_true-unreach-call_true-termination.cil.c [2018-11-28 10:33:30,387 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/data/63a2f443f/f74a7018af684957bf3215497f6687f6/FLAGbf60d7b16 [2018-11-28 10:33:30,855 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/data/63a2f443f/f74a7018af684957bf3215497f6687f6 [2018-11-28 10:33:30,857 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-28 10:33:30,858 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-28 10:33:30,859 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-28 10:33:30,859 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-28 10:33:30,862 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-28 10:33:30,863 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 10:33:30" (1/1) ... [2018-11-28 10:33:30,864 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@8453d6d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:30, skipping insertion in model container [2018-11-28 10:33:30,865 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 10:33:30" (1/1) ... [2018-11-28 10:33:30,869 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-28 10:33:30,909 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-28 10:33:31,277 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 10:33:31,289 INFO L191 MainTranslator]: Completed pre-run [2018-11-28 10:33:31,362 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 10:33:31,397 INFO L195 MainTranslator]: Completed translation [2018-11-28 10:33:31,398 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31 WrapperNode [2018-11-28 10:33:31,398 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-28 10:33:31,398 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-28 10:33:31,398 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-28 10:33:31,399 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-28 10:33:31,406 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,426 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,606 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-28 10:33:31,607 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-28 10:33:31,607 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-28 10:33:31,607 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-28 10:33:31,615 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,616 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,644 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,644 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,709 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,770 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,793 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... [2018-11-28 10:33:31,836 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-28 10:33:31,836 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-28 10:33:31,837 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-28 10:33:31,837 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-28 10:33:31,838 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:33:31,891 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-28 10:33:31,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-28 10:33:31,891 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-28 10:33:31,891 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-28 10:33:38,220 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-28 10:33:38,220 INFO L280 CfgBuilder]: Removed 1503 assue(true) statements. [2018-11-28 10:33:38,221 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 10:33:38 BoogieIcfgContainer [2018-11-28 10:33:38,221 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-28 10:33:38,221 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-28 10:33:38,221 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-28 10:33:38,224 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-28 10:33:38,225 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 10:33:38,225 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 28.11 10:33:30" (1/3) ... [2018-11-28 10:33:38,226 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@541f4569 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 10:33:38, skipping insertion in model container [2018-11-28 10:33:38,226 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 10:33:38,226 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 10:33:31" (2/3) ... [2018-11-28 10:33:38,226 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@541f4569 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 10:33:38, skipping insertion in model container [2018-11-28 10:33:38,226 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 10:33:38,227 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 10:33:38" (3/3) ... [2018-11-28 10:33:38,228 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product27_true-unreach-call_true-termination.cil.c [2018-11-28 10:33:38,264 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-28 10:33:38,265 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-28 10:33:38,265 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-28 10:33:38,265 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-28 10:33:38,265 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-28 10:33:38,265 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-28 10:33:38,265 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-28 10:33:38,265 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-28 10:33:38,265 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-28 10:33:38,339 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6172 states. [2018-11-28 10:33:38,455 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1252 [2018-11-28 10:33:38,455 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:33:38,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:33:38,471 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:33:38,471 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:33:38,471 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-28 10:33:38,471 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6172 states. [2018-11-28 10:33:38,533 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1252 [2018-11-28 10:33:38,533 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:33:38,533 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:33:38,537 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:33:38,537 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:33:38,545 INFO L794 eck$LassoCheckResult]: Stem: 2462#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5797#L-1true havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 3601#L2445true havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 4191#L2453true main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 6121#L1952true assume 0 != main_~tmp~21; 4091#L1925true havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 3207#L2551true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 2474#L2576true bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4171#L2979true assume 0 == initPersonOnFloor_~floor; 4151#L2980true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2775#L3087-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4633#L2771true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4880#L2783-2true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 501#L2708true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2772#L2735true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6113#L1597true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3324#L981true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4310#L312true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3275#L985true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2704#L998true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1083#L1134true assume !(0 != timeShift_~tmp___9~2); 3983#L1225true assume !(1 == ~doorState~0); 3984#L1225-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 503#L2708-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2760#L2735-3true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6114#L1597-1true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3594#L864true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4313#L312-1true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5874#L877true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5857#L1233true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1615#L921true assume !(1 == ~currentHeading~0); 2076#L931true assume !(0 == ~currentFloorID~0); 2079#L931-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1823#L937-5true havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 459#L2708-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2852#L2735-25true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6116#L1597-3true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6075#L2482true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6079#L2482-1true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 463#L2708-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2853#L2735-26true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6108#L1597-4true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3317#L981-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4293#L312-4true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3277#L985-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2705#L998-1true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1084#L1134-1true assume !(0 != timeShift_~tmp___9~2); 3985#L1225-3true assume !(1 == ~doorState~0); 3979#L1225-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 445#L2708-29true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2837#L2735-29true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6109#L1597-5true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3585#L864-2true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4296#L312-5true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5878#L877-2true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5858#L1233-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1625#L921-3true assume !(1 == ~currentHeading~0); 2073#L931-9true assume !(0 == ~currentFloorID~0); 2052#L931-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1816#L937-11true havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 263#L2708-51true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3453#L2735-51true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6111#L1597-7true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6084#L2482-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6081#L2482-3true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 268#L2708-52true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3452#L2735-52true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6112#L1597-8true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3318#L981-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4303#L312-8true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3279#L985-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2695#L998-2true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1088#L1134-2true assume !(0 != timeShift_~tmp___9~2); 3980#L1225-6true assume !(1 == ~doorState~0); 3981#L1225-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 240#L2708-55true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3447#L2735-55true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6102#L1597-9true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3588#L864-4true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4306#L312-9true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5923#L877-4true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5859#L1233-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1696#L921-6true assume !(1 == ~currentHeading~0); 2045#L931-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2048#L931-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1809#L937-17true havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 400#L2708-77true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3425#L2735-77true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6104#L1597-11true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6059#L2482-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6065#L2482-5true havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 3213#L2551-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 2472#L2576-1true bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4173#L2979-1true assume 0 == initPersonOnFloor_~floor; 4152#L2980-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2780#L3087-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4639#L2771-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4885#L2783-5true havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 405#L2708-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3426#L2735-78true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6105#L1597-12true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3320#L981-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4287#L312-12true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3280#L985-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2696#L998-3true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1090#L1134-3true assume !(0 != timeShift_~tmp___9~2); 3982#L1225-9true assume !(1 == ~doorState~0); 3892#L1225-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 374#L2708-81true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3418#L2735-81true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6106#L1597-13true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3591#L864-6true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4290#L312-13true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5926#L877-6true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5852#L1233-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1705#L921-9true assume !(1 == ~currentHeading~0); 2017#L931-27true assume !(0 == ~currentFloorID~0); 2023#L931-29true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1889#L937-23true havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 325#L2708-103true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3503#L2735-103true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6096#L1597-15true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6069#L2482-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6068#L2482-7true cleanup_~i~1 := 0; 5883#L1757-2true [2018-11-28 10:33:38,546 INFO L796 eck$LassoCheckResult]: Loop: 5883#L1757-2true assume !false; 5922#L1758true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 5868#L1761true assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 4866#L139true cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 5718#L1765true assume 1 != cleanup_~tmp___0~8; 5709#L1765-1true havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 328#L2708-104true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3502#L2735-104true anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 179#L420true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 4525#L484true isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 4726#L497true cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 5945#L1777true assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 316#L2708-109true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3497#L2735-109true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6097#L1597-16true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3322#L981-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4269#L312-16true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3281#L985-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2698#L998-4true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1094#L1134-4true assume !(0 != timeShift_~tmp___9~2); 3893#L1225-12true assume !(1 == ~doorState~0); 3894#L1225-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 304#L2708-112true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3499#L2735-112true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6098#L1597-17true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3581#L864-8true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4272#L312-17true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5930#L877-8true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5854#L1233-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1685#L921-12true assume !(1 == ~currentHeading~0); 2013#L931-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2186#L931-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1887#L937-29true havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 28#L2708-134true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3405#L2735-134true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6101#L1597-19true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6070#L2482-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6056#L2482-9true cleanup_~i~1 := 1 + cleanup_~i~1; 5883#L1757-2true [2018-11-28 10:33:38,558 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:33:38,558 INFO L82 PathProgramCache]: Analyzing trace with hash -1568924921, now seen corresponding path program 1 times [2018-11-28 10:33:38,560 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:33:38,560 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:33:38,605 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:38,606 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:33:38,606 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:38,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:33:38,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:33:38,792 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:33:38,793 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:33:38,796 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:33:38,796 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:33:38,797 INFO L82 PathProgramCache]: Analyzing trace with hash 1495930024, now seen corresponding path program 1 times [2018-11-28 10:33:38,797 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:33:38,797 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:33:38,798 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:38,798 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:33:38,798 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:38,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:33:38,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:33:38,929 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:33:38,929 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 10:33:38,930 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:33:38,940 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 10:33:38,940 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-28 10:33:38,942 INFO L87 Difference]: Start difference. First operand 6172 states. Second operand 7 states. [2018-11-28 10:33:44,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:33:44,851 INFO L93 Difference]: Finished difference Result 53031 states and 99247 transitions. [2018-11-28 10:33:44,851 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-28 10:33:44,852 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53031 states and 99247 transitions. [2018-11-28 10:33:45,101 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 11561 [2018-11-28 10:33:45,316 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53031 states to 52959 states and 99163 transitions. [2018-11-28 10:33:45,317 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52959 [2018-11-28 10:33:45,362 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52959 [2018-11-28 10:33:45,363 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52959 states and 99163 transitions. [2018-11-28 10:33:45,427 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 10:33:45,427 INFO L705 BuchiCegarLoop]: Abstraction has 52959 states and 99163 transitions. [2018-11-28 10:33:45,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52959 states and 99163 transitions. [2018-11-28 10:33:45,858 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52959 to 17909. [2018-11-28 10:33:45,859 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17909 states. [2018-11-28 10:33:45,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17909 states to 17909 states and 33520 transitions. [2018-11-28 10:33:45,887 INFO L728 BuchiCegarLoop]: Abstraction has 17909 states and 33520 transitions. [2018-11-28 10:33:45,888 INFO L608 BuchiCegarLoop]: Abstraction has 17909 states and 33520 transitions. [2018-11-28 10:33:45,888 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-28 10:33:45,888 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17909 states and 33520 transitions. [2018-11-28 10:33:45,931 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3657 [2018-11-28 10:33:45,931 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:33:45,931 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:33:45,934 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:33:45,934 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:33:45,935 INFO L794 eck$LassoCheckResult]: Stem: 62469#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 62470#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 63564#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 63565#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 64164#L1952 assume 0 != main_~tmp~21; 64096#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 63169#L2551 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 62483#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 62484#L2979 assume 0 == initPersonOnFloor_~floor; 64148#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 59940#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 62873#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 64361#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60244#L2708 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 60245#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 62869#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 63266#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 63267#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 63211#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 63212#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 71019#L1134 assume !(0 != timeShift_~tmp___9~2); 71020#L1225 assume !(1 == ~doorState~0); 76707#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 76706#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 76705#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76704#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76702#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76703#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 76711#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 76709#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 76708#L921 assume !(1 == ~currentHeading~0); 62143#L931 assume !(0 == ~currentFloorID~0); 61656#L931-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 62140#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 67886#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 65722#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 67885#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 65685#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 64962#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 66380#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 65720#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 66377#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 66028#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 66027#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 66026#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 63215#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 72325#L1134-1 assume !(0 != timeShift_~tmp___9~2); 72326#L1225-3 assume !(1 == ~doorState~0); 76812#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 76811#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 76810#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76809#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76807#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64266#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 64267#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 65559#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 65560#L921-3 assume !(1 == ~currentHeading~0); 62142#L931-9 assume !(0 == ~currentFloorID~0); 61495#L931-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 61963#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 59883#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59884#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 63330#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 65688#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 64963#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 66105#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 66048#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 66071#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 66065#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 66064#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 66063#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 63218#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 76470#L1134-2 assume !(0 != timeShift_~tmp___9~2); 76471#L1225-6 assume !(1 == ~doorState~0); 76802#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 76801#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 76800#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76799#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76798#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64283#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 64284#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 65561#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 61828#L921-6 assume !(1 == ~currentHeading~0); 61830#L931-18 assume !(0 == ~currentFloorID~0); 61491#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 62137#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 72523#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 65741#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 72521#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 72519#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 72511#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 72159#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 72154#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 72153#L2979-1 assume 0 == initPersonOnFloor_~floor; 72127#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 71901#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 71410#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 66740#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 66737#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 65784#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 66732#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 66021#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 66020#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 66019#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 63220#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 74872#L1134-3 assume !(0 != timeShift_~tmp___9~2); 74873#L1225-9 assume !(1 == ~doorState~0); 76861#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 76860#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 76859#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76858#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76857#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64257#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 64258#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 65551#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 61846#L921-9 assume !(1 == ~currentHeading~0); 61847#L931-27 assume !(0 == ~currentFloorID~0); 61463#L931-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 62040#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 59985#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59986#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 63349#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 65682#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 64932#L2482-7 cleanup_~i~1 := 0; 65580#L1757-2 [2018-11-28 10:33:45,935 INFO L796 eck$LassoCheckResult]: Loop: 65580#L1757-2 assume !false; 65581#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 65571#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 64706#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 64707#L1765 assume 1 != cleanup_~tmp___0~8; 65449#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 59990#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59991#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 59727#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 59490#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 64534#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 64595#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 67907#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 65738#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 67906#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 65826#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 65818#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 65791#L985-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 63222#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 75484#L1134-4 assume !(0 != timeShift_~tmp___9~2); 75485#L1225-12 assume !(1 == ~doorState~0); 76992#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 76991#L2708-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 76990#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76989#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76987#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64223#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 64224#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 65554#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 65555#L921-12 assume !(1 == ~currentHeading~0); 62136#L931-36 assume !(0 == ~currentFloorID~0); 61444#L931-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 62038#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 59322#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59323#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 63306#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 65683#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 64948#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 65580#L1757-2 [2018-11-28 10:33:45,935 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:33:45,935 INFO L82 PathProgramCache]: Analyzing trace with hash -1145278199, now seen corresponding path program 1 times [2018-11-28 10:33:45,935 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:33:45,935 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:33:45,936 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:45,936 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:33:45,936 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:45,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:33:46,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:33:46,015 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:33:46,015 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:33:46,016 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:33:46,016 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:33:46,016 INFO L82 PathProgramCache]: Analyzing trace with hash 686583398, now seen corresponding path program 1 times [2018-11-28 10:33:46,016 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:33:46,016 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:33:46,017 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:46,017 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:33:46,017 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:46,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:33:46,069 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:33:46,070 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:33:46,070 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:33:46,070 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:33:46,070 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 10:33:46,070 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 10:33:46,071 INFO L87 Difference]: Start difference. First operand 17909 states and 33520 transitions. cyclomatic complexity: 15613 Second operand 3 states. [2018-11-28 10:33:46,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:33:46,539 INFO L93 Difference]: Finished difference Result 32166 states and 60162 transitions. [2018-11-28 10:33:46,540 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 10:33:46,540 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 32166 states and 60162 transitions. [2018-11-28 10:33:46,737 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7286 [2018-11-28 10:33:46,816 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 32166 states to 32166 states and 60162 transitions. [2018-11-28 10:33:46,817 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32166 [2018-11-28 10:33:46,836 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32166 [2018-11-28 10:33:46,837 INFO L73 IsDeterministic]: Start isDeterministic. Operand 32166 states and 60162 transitions. [2018-11-28 10:33:46,856 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 10:33:46,857 INFO L705 BuchiCegarLoop]: Abstraction has 32166 states and 60162 transitions. [2018-11-28 10:33:46,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32166 states and 60162 transitions. [2018-11-28 10:33:47,123 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32166 to 32134. [2018-11-28 10:33:47,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 32134 states. [2018-11-28 10:33:47,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32134 states to 32134 states and 60114 transitions. [2018-11-28 10:33:47,170 INFO L728 BuchiCegarLoop]: Abstraction has 32134 states and 60114 transitions. [2018-11-28 10:33:47,170 INFO L608 BuchiCegarLoop]: Abstraction has 32134 states and 60114 transitions. [2018-11-28 10:33:47,171 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-28 10:33:47,171 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 32134 states and 60114 transitions. [2018-11-28 10:33:47,245 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7278 [2018-11-28 10:33:47,245 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:33:47,245 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:33:47,248 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:33:47,248 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:33:47,248 INFO L794 eck$LassoCheckResult]: Stem: 112598#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 112599#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 113681#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 113682#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 114292#L1952 assume 0 != main_~tmp~21; 114220#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 113287#L2551 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 112612#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 112613#L2979 assume 0 == initPersonOnFloor_~floor; 114274#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 110019#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 113004#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 114494#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 110324#L2708 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110325#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113000#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 113383#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113384#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 113331#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 113332#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 118371#L1134 assume !(0 != timeShift_~tmp___9~2); 114124#L1225 assume !(1 == ~doorState~0); 114125#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 110327#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110328#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 112982#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 113662#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113663#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 114427#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 121663#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 121662#L921 assume !(1 == ~currentHeading~0); 112241#L931 assume !(0 == ~currentFloorID~0); 112242#L931-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 112076#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 110273#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110274#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113087#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 115827#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 115087#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 110278#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110279#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113088#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 113370#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113372#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 113334#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 113335#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 134994#L1134-1 assume !(0 != timeShift_~tmp___9~2); 114126#L1225-3 assume !(1 == ~doorState~0); 114120#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 110256#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110257#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113073#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 115840#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 114399#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 114400#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 115702#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 111837#L921-3 assume !(1 == ~currentHeading~0); 111838#L931-9 assume !(0 == ~currentFloorID~0); 111607#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 112235#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 109965#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 109966#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 115841#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 115830#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 115088#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 109972#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 109973#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 136600#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 136070#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 136069#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 136067#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 130330#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 130322#L1134-2 assume !(0 != timeShift_~tmp___9~2); 130323#L1225-6 assume !(1 == ~doorState~0); 137533#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 124730#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 124675#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 124674#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 124672#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 124670#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 123834#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 115703#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 111941#L921-6 assume !(1 == ~currentHeading~0); 111942#L931-18 assume !(0 == ~currentFloorID~0); 111602#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 112234#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 138076#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 119173#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 138075#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 138070#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 138068#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 138066#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 138061#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 138060#L2979-1 assume 0 == initPersonOnFloor_~floor; 138040#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 138026#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 138025#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 138020#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 138019#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113433#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113434#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 113376#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113377#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 140600#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 113339#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 126558#L1134-3 assume !(0 != timeShift_~tmp___9~2); 114123#L1225-9 assume !(1 == ~doorState~0); 113989#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 110139#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110140#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 137935#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 113653#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113654#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 114391#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 115693#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 111957#L921-9 assume !(1 == ~currentHeading~0); 111958#L931-27 assume !(0 == ~currentFloorID~0); 111569#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 112233#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 125237#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 115952#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 125232#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 124576#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 124572#L2482-7 cleanup_~i~1 := 0; 124571#L1757-2 [2018-11-28 10:33:47,249 INFO L796 eck$LassoCheckResult]: Loop: 124571#L1757-2 assume !false; 124568#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 124559#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 124557#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 124442#L1765 assume 1 != cleanup_~tmp___0~8; 124422#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 124418#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 124412#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 124355#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 124336#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 124328#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 124322#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 124321#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 115917#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 124317#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 125791#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 124279#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 124280#L985-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 125404#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 125401#L1134-4 assume !(0 != timeShift_~tmp___9~2); 125399#L1225-12 assume !(1 == ~doorState~0); 125397#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 125395#L2708-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 125393#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 125390#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 125346#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 125290#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 125281#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 125270#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 125261#L921-12 assume !(1 == ~currentHeading~0); 125254#L931-36 assume !(0 == ~currentFloorID~0); 125248#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 125239#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 125238#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 125236#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 125234#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 124581#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 124573#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 124571#L1757-2 [2018-11-28 10:33:47,249 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:33:47,249 INFO L82 PathProgramCache]: Analyzing trace with hash -102238263, now seen corresponding path program 1 times [2018-11-28 10:33:47,249 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:33:47,249 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:33:47,250 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:47,250 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:33:47,250 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:47,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:33:47,320 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:33:47,320 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:33:47,321 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:33:47,321 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:33:47,321 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:33:47,321 INFO L82 PathProgramCache]: Analyzing trace with hash -1833376536, now seen corresponding path program 1 times [2018-11-28 10:33:47,321 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:33:47,321 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:33:47,322 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:47,322 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:33:47,322 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:33:47,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:33:47,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:33:47,381 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:33:47,382 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-28 10:33:47,382 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:33:47,382 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-28 10:33:47,382 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-28 10:33:47,382 INFO L87 Difference]: Start difference. First operand 32134 states and 60114 transitions. cyclomatic complexity: 27982 Second operand 8 states. [2018-11-28 10:33:53,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:33:53,352 INFO L93 Difference]: Finished difference Result 310469 states and 583532 transitions. [2018-11-28 10:33:53,361 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-11-28 10:33:53,361 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 310469 states and 583532 transitions. [2018-11-28 10:33:54,186 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 88956 [2018-11-28 10:33:54,865 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 310469 states to 310469 states and 583532 transitions. [2018-11-28 10:33:54,866 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 310469 [2018-11-28 10:33:55,027 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 310469 [2018-11-28 10:33:55,027 INFO L73 IsDeterministic]: Start isDeterministic. Operand 310469 states and 583532 transitions. [2018-11-28 10:33:55,152 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 10:33:55,152 INFO L705 BuchiCegarLoop]: Abstraction has 310469 states and 583532 transitions. [2018-11-28 10:33:55,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 310469 states and 583532 transitions. [2018-11-28 10:34:00,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 310469 to 64090. [2018-11-28 10:34:00,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 64090 states. [2018-11-28 10:34:00,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64090 states to 64090 states and 119867 transitions. [2018-11-28 10:34:00,744 INFO L728 BuchiCegarLoop]: Abstraction has 64090 states and 119867 transitions. [2018-11-28 10:34:00,745 INFO L608 BuchiCegarLoop]: Abstraction has 64090 states and 119867 transitions. [2018-11-28 10:34:00,745 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-28 10:34:00,745 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64090 states and 119867 transitions. [2018-11-28 10:34:00,848 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 14432 [2018-11-28 10:34:00,848 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:34:00,849 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:34:00,851 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:00,851 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:00,852 INFO L794 eck$LassoCheckResult]: Stem: 455324#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 455325#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 456504#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 456505#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 457158#L1952 assume 0 != main_~tmp~21; 457078#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 456056#L2551 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 455338#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 455339#L2979 assume 0 == initPersonOnFloor_~floor; 457131#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 452702#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 455736#L2771 assume !(0 == callOnFloor_~floorID); 457572#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 457380#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 453006#L2708 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 453007#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 458968#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 458964#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 458965#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 456111#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 456112#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 463313#L1134 assume !(0 != timeShift_~tmp___9~2); 463314#L1225 assume !(1 == ~doorState~0); 463951#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 463950#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 463949#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 463948#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 463946#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 463945#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 463944#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 463600#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 463589#L921 assume !(1 == ~currentHeading~0); 463574#L931 assume !(0 == ~currentFloorID~0); 463561#L931-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 460672#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 460673#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 460662#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 460663#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 460651#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 460652#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 460647#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 460648#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 460640#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 460641#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 460629#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 460630#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 455687#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 453877#L1134-1 assume !(0 != timeShift_~tmp___9~2); 453879#L1225-3 assume !(1 == ~doorState~0); 456945#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 456946#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 455803#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 455804#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 472376#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 472375#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 472361#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 472316#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 454550#L921-3 assume !(1 == ~currentHeading~0); 454551#L931-9 assume !(0 == ~currentFloorID~0); 454316#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 454965#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 464831#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 464823#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 464824#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 464817#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 464812#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 464811#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 464807#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 464806#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 464788#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 464790#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 480323#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 480322#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 480251#L1134-2 assume !(0 != timeShift_~tmp___9~2); 480250#L1225-6 assume !(1 == ~doorState~0); 480244#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 480243#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 480240#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 480236#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 480229#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 480185#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 479977#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 479969#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 479954#L921-6 assume !(1 == ~currentHeading~0); 479942#L931-18 assume !(0 == ~currentFloorID~0); 479933#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 468547#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 468548#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 468538#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 468539#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 468534#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 457966#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 458850#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 489945#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 489944#L2979-1 assume 0 == initPersonOnFloor_~floor; 472483#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 472470#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 472465#L2771-2 assume !(0 == callOnFloor_~floorID); 472466#L2774-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 472314#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 472315#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 472048#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 472049#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 468549#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 468551#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 468530#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 456119#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 489976#L1134-3 assume !(0 != timeShift_~tmp___9~2); 489973#L1225-9 assume !(1 == ~doorState~0); 489971#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 489970#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 489969#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 489968#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 489966#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 489964#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 489869#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 489861#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 489845#L921-9 assume !(1 == ~currentHeading~0); 489834#L931-27 assume !(0 == ~currentFloorID~0); 489817#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 489818#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 485051#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 484996#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 485044#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 485045#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 458853#L2482-7 cleanup_~i~1 := 0; 458710#L1757-2 [2018-11-28 10:34:00,852 INFO L796 eck$LassoCheckResult]: Loop: 458710#L1757-2 assume !false; 458711#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 458702#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 457740#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 457741#L1765 assume 1 != cleanup_~tmp___0~8; 458542#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 484869#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 496251#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 496247#L420 assume !(0 != anyStopRequested_~tmp___3~0); 496248#L424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 495641#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 489814#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 484761#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 484762#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 479921#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 458878#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 458879#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 457225#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 457226#L985-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 513974#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 513972#L1134-4 assume !(0 != timeShift_~tmp___9~2); 513973#L1225-12 assume !(1 == ~doorState~0); 456815#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 456816#L2708-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 515209#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 458880#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 458881#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 457231#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 457232#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 458685#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 454636#L921-12 assume !(1 == ~currentHeading~0); 454637#L931-36 assume !(0 == ~currentFloorID~0); 454249#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 454862#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 454863#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 456229#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 456230#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 458856#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 457984#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 458710#L1757-2 [2018-11-28 10:34:00,852 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:00,852 INFO L82 PathProgramCache]: Analyzing trace with hash -628549178, now seen corresponding path program 1 times [2018-11-28 10:34:00,852 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:00,853 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:00,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:00,853 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:00,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:00,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:00,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:00,905 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:00,905 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:34:00,906 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:34:00,906 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:00,906 INFO L82 PathProgramCache]: Analyzing trace with hash -1345909118, now seen corresponding path program 1 times [2018-11-28 10:34:00,906 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:00,906 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:00,910 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:00,910 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:00,910 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:00,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:00,965 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:00,966 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:00,966 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-28 10:34:00,966 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:34:00,966 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-28 10:34:00,966 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-28 10:34:00,967 INFO L87 Difference]: Start difference. First operand 64090 states and 119867 transitions. cyclomatic complexity: 55779 Second operand 8 states. [2018-11-28 10:34:09,940 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:34:09,940 INFO L93 Difference]: Finished difference Result 369568 states and 691135 transitions. [2018-11-28 10:34:09,941 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-11-28 10:34:09,941 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 369568 states and 691135 transitions. [2018-11-28 10:34:10,868 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 102782 [2018-11-28 10:34:11,685 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 369568 states to 369568 states and 691135 transitions. [2018-11-28 10:34:11,685 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 369568 [2018-11-28 10:34:11,898 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 369568 [2018-11-28 10:34:11,898 INFO L73 IsDeterministic]: Start isDeterministic. Operand 369568 states and 691135 transitions. [2018-11-28 10:34:12,056 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 10:34:12,056 INFO L705 BuchiCegarLoop]: Abstraction has 369568 states and 691135 transitions. [2018-11-28 10:34:12,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 369568 states and 691135 transitions. [2018-11-28 10:34:17,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 369568 to 63441. [2018-11-28 10:34:17,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 63441 states. [2018-11-28 10:34:17,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63441 states to 63441 states and 118636 transitions. [2018-11-28 10:34:17,954 INFO L728 BuchiCegarLoop]: Abstraction has 63441 states and 118636 transitions. [2018-11-28 10:34:17,954 INFO L608 BuchiCegarLoop]: Abstraction has 63441 states and 118636 transitions. [2018-11-28 10:34:17,954 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-28 10:34:17,954 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63441 states and 118636 transitions. [2018-11-28 10:34:18,057 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 14390 [2018-11-28 10:34:18,057 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:34:18,058 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:34:18,060 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:18,060 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:18,061 INFO L794 eck$LassoCheckResult]: Stem: 889042#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 889043#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 890197#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 890198#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 890853#L1952 assume 0 != main_~tmp~21; 890773#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 889753#L2551 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 889055#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 889056#L2979 assume 0 == initPersonOnFloor_~floor; 890828#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 886449#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 889451#L2771 assume !(0 == callOnFloor_~floorID); 891265#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 891074#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 886754#L2708 assume !(0 == isFloorCalling_~floorID); 885908#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 885909#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 892513#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 892514#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 892504#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 892505#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 902280#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 902271#L1134 assume !(0 != timeShift_~tmp___9~2); 902270#L1225 assume !(1 == ~doorState~0); 901941#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 893475#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 886758#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 889429#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 890178#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 890179#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 914320#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 914311#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 914301#L921 assume !(1 == ~currentHeading~0); 914293#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 914214#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 912711#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 912709#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 893556#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 893557#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 893544#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 893545#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 886708#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 886709#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 914083#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 914082#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 914079#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 914075#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 914073#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 914066#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 914065#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 914040#L1134-1 assume !(0 != timeShift_~tmp___9~2); 890656#L1225-3 assume !(1 == ~doorState~0); 890647#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 890648#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 894615#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 912778#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 912776#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 912774#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 912773#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 912769#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 912658#L921-3 assume !(1 == ~currentHeading~0); 912647#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 912640#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 888493#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 888494#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 894474#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 894475#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 894464#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 894463#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 886397#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 886398#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 910962#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 910961#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 910959#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 910954#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 910951#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 910950#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 910949#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 910947#L1134-2 assume !(0 != timeShift_~tmp___9~2); 910946#L1225-6 assume !(1 == ~doorState~0); 910945#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 910944#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 893561#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 910943#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 910941#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 910939#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 910937#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 910934#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 910883#L921-6 assume !(1 == ~currentHeading~0); 910877#L931-18 assume !(0 == ~currentFloorID~0); 888671#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 888483#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 888484#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 889923#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 889924#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 909496#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 909494#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 889754#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 889052#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 889053#L2979-1 assume 0 == initPersonOnFloor_~floor; 890829#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 886452#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 889456#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 891271#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 892566#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 892557#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 892558#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 892548#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 892550#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 893457#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 889812#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 895710#L1134-3 assume !(0 != timeShift_~tmp___9~2); 895712#L1225-9 assume !(1 == ~doorState~0); 908291#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 908290#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 908289#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 908288#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 908286#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 908285#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 908283#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 908265#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 908264#L921-9 assume !(1 == ~currentHeading~0); 903541#L931-27 assume !(0 == ~currentFloorID~0); 903511#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 903508#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 902627#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 902628#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 902623#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 902624#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 902619#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 902620#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 902613#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 902612#L2482-7 cleanup_~i~1 := 0; 931182#L1757-2 [2018-11-28 10:34:18,061 INFO L796 eck$LassoCheckResult]: Loop: 931182#L1757-2 assume !false; 902446#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 902447#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 902388#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 902389#L1765 assume 1 != cleanup_~tmp___0~8; 902367#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 902368#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 902363#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 902364#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 902359#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 902360#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 902353#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 902354#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 902347#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 902348#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 902342#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 902344#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 894744#L985-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 889814#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 896232#L1134-4 assume !(0 != timeShift_~tmp___9~2); 896234#L1225-12 assume !(1 == ~doorState~0); 934248#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 934247#L2708-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 934246#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 934245#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 934243#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 934241#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 934146#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 934122#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 930995#L921-12 assume !(1 == ~currentHeading~0); 930987#L931-36 assume !(0 == ~currentFloorID~0); 930694#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 930687#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 902855#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 902848#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 902844#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 902842#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 902681#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 902679#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 902680#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 931184#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 931182#L1757-2 [2018-11-28 10:34:18,061 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:18,061 INFO L82 PathProgramCache]: Analyzing trace with hash 1240566189, now seen corresponding path program 1 times [2018-11-28 10:34:18,063 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:18,063 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:18,064 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:18,064 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:18,064 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:18,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:18,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:18,120 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:18,120 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:34:18,120 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:34:18,120 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:18,122 INFO L82 PathProgramCache]: Analyzing trace with hash 986850342, now seen corresponding path program 1 times [2018-11-28 10:34:18,123 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:18,123 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:18,123 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:18,123 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:18,123 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:18,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 10:34:18,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 10:34:18,593 WARN L180 SmtUtils]: Spent 420.00 ms on a formula simplification. DAG size of input: 191 DAG size of output: 172 [2018-11-28 10:34:19,150 WARN L180 SmtUtils]: Spent 512.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 121 [2018-11-28 10:34:19,158 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 10:34:19,159 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 10:34:19,159 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 10:34:19,159 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 10:34:19,159 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-28 10:34:19,159 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,159 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 10:34:19,159 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 10:34:19,159 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product27_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-28 10:34:19,159 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 10:34:19,159 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 10:34:19,179 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,206 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,208 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,210 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,215 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,236 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,241 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,250 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,254 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,257 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,260 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,266 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,277 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,283 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,284 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,289 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,290 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,298 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,302 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,303 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,305 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,315 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,319 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,333 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,334 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,341 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,357 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:19,783 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 10:34:19,784 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,788 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,789 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,794 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,794 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~19=0} Honda state: {ULTIMATE.start_cleanup_~tmp~19=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,813 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,814 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,816 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,816 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,833 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,833 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,837 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,837 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,856 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,857 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,859 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,859 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,878 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,878 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,880 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,880 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,897 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,898 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,913 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,913 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,938 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,938 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,941 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,941 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret43=0} Honda state: {ULTIMATE.start_timeShift_#t~ret43=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,957 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,957 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,961 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,961 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret100=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,977 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,977 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,979 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,979 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret157=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret157=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:19,994 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:19,995 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:19,996 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:19,997 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret160=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret160=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,014 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,014 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,017 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,017 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,032 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,032 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,034 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,034 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,050 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,050 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,051 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,052 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret26=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret26=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,067 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,067 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,069 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,069 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret47=0} Honda state: {ULTIMATE.start_timeShift_#t~ret47=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,085 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,085 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,088 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,088 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,103 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,103 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,105 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,106 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret7=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,121 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,122 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,131 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,132 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#res=-8, ULTIMATE.start_stopRequestedInDirection_~tmp___0~2=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~15=-8, ~calls_0~0=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~27=-8, ULTIMATE.start_isExecutiveFloorCalling_#res=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~9=-8, ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~6=-8} Honda state: {ULTIMATE.start_isFloorCalling_#res=-8, ULTIMATE.start_stopRequestedInDirection_~tmp___0~2=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~15=-8, ~calls_0~0=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~27=-8, ULTIMATE.start_isExecutiveFloorCalling_#res=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~9=-8, ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~6=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,154 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,154 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,156 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,156 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~7=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,172 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,172 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,174 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,174 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret52=0} Honda state: {ULTIMATE.start_timeShift_#t~ret52=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,190 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,190 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,194 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,194 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret3=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,209 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,209 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,211 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,211 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,226 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,226 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,228 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,228 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,364 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,365 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,367 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,367 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret29=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret29=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,382 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,382 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,384 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,384 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~11=0} Honda state: {ULTIMATE.start_timeShift_~tmp~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,400 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,400 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,405 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,405 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret42=0} Honda state: {ULTIMATE.start_timeShift_#t~ret42=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,421 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,421 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,425 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,425 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret158=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret158=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,450 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,450 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,452 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,452 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,477 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,477 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,480 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,480 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,507 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,507 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,517 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,518 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___1~8=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___1~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,545 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,546 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,553 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,553 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,570 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,570 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,573 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,573 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,589 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,589 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,593 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,593 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,611 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,611 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,613 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,613 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret46=0} Honda state: {ULTIMATE.start_timeShift_#t~ret46=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,627 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,627 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,629 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,629 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret51=0} Honda state: {ULTIMATE.start_timeShift_#t~ret51=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,644 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,644 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,647 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,647 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~9=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~9=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,662 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,662 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,665 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,665 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~7=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,680 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,680 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,682 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,682 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret22=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,697 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,697 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,698 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,699 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret159=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret159=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,714 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,714 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,721 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,721 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret23=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,736 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,736 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,738 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,739 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret28=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret28=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,753 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,753 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,756 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,756 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~0=0, ULTIMATE.start_cleanup_~tmp___0~8=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~0=0, ULTIMATE.start_cleanup_~tmp___0~8=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,771 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,771 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,773 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,773 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret49=0} Honda state: {ULTIMATE.start_timeShift_#t~ret49=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,788 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,788 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,791 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,791 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~12=1, ULTIMATE.start_isExecutiveFloor_#res=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~16=1} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~12=1, ULTIMATE.start_isExecutiveFloor_#res=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~16=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,806 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,806 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,807 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,807 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret45=0} Honda state: {ULTIMATE.start_timeShift_#t~ret45=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,822 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,822 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,824 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,824 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=4} Honda state: {~doorState~0=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,838 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,839 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,840 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,840 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret108=0} Honda state: {ULTIMATE.start_cleanup_#t~ret108=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,856 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,856 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,858 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,858 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,873 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,873 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,875 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,875 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret4=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,890 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,890 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,892 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,892 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,907 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,907 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,908 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,908 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret6=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,923 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,923 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,925 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,925 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret8=0} Honda state: {ULTIMATE.start_isIdle_#t~ret8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,940 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,940 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,945 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,945 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir=0, ULTIMATE.start_stopRequestedInDirection_#in~dir=0, ULTIMATE.start_stopRequestedInDirection_~dir=0, ULTIMATE.start_continueInDirection_~dir=0, ~currentHeading~0=0} Honda state: {ULTIMATE.start_continueInDirection_#in~dir=0, ULTIMATE.start_stopRequestedInDirection_#in~dir=0, ULTIMATE.start_stopRequestedInDirection_~dir=0, ULTIMATE.start_continueInDirection_~dir=0, ~currentHeading~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,960 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,960 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,962 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,962 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret109=0} Honda state: {ULTIMATE.start_cleanup_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,976 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,976 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,978 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,978 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:20,992 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:20,992 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:20,994 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:34:20,994 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~3=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:21,009 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:34:21,009 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:21,031 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-28 10:34:21,031 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:34:23,955 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-28 10:34:23,957 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 10:34:23,957 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 10:34:23,958 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 10:34:23,958 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 10:34:23,958 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-28 10:34:23,958 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:34:23,958 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 10:34:23,958 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 10:34:23,958 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product27_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-28 10:34:23,958 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 10:34:23,958 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 10:34:23,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,965 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,976 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,977 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,988 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:23,998 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,015 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,045 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,068 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,071 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,079 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:34:24,643 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 10:34:24,646 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-28 10:34:24,647 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,649 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,649 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,649 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,649 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,650 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,651 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,651 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,653 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,654 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,654 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,654 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,654 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,654 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,654 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,655 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,655 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,655 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,656 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,656 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,656 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,656 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,656 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,657 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,657 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,657 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,658 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,658 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,658 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,658 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,658 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,658 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,659 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,659 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,659 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,659 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,660 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,660 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,660 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,660 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,660 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,660 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,661 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,661 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,661 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,661 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,662 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,662 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,662 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,662 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,662 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,662 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,663 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,663 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,663 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,664 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,664 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,664 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,664 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,664 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,664 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,664 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,665 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,665 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,666 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,666 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,666 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,666 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,666 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,666 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,666 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,667 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,667 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,667 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,667 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,668 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,668 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,668 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,668 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,668 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,669 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,669 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,669 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,669 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,669 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,670 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,670 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,670 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,670 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,670 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,671 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,671 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,671 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,671 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,671 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,671 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,672 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,672 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,674 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,674 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,674 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,674 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,674 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,675 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,675 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,675 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,675 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,675 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,676 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,676 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,676 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,676 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,676 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,676 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,677 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,677 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,677 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,678 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,678 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,678 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,678 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,678 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,678 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,679 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,679 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,679 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,679 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,680 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,680 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,680 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,680 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,680 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,680 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,681 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,681 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,682 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,682 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,682 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,682 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,682 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,682 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,683 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,683 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,683 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,683 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,684 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,684 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,684 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,684 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,684 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,684 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,684 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,685 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,685 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,686 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,686 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,686 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,686 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,686 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,686 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,686 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,687 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,687 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,687 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,688 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,688 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,688 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,688 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,688 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,688 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,689 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,689 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,689 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,689 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,690 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,690 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,690 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,690 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,690 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,691 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,691 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,691 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,691 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,691 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,691 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,691 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,692 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,692 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,692 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,693 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,693 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,693 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,693 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,693 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 10:34:24,693 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,701 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 10:34:24,702 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,710 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,710 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,710 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,710 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,711 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,711 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,711 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,711 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,711 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,711 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,712 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,712 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,712 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,712 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,712 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,712 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,712 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,712 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,717 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,717 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,718 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,718 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,718 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,718 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,718 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,718 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,718 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,719 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,719 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,719 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,720 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,720 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,720 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,720 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,720 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,720 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,723 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,723 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,723 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,723 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,724 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,724 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,724 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,724 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,724 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,725 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,725 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,725 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,725 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,725 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,725 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,725 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,726 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,726 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,726 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,727 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,733 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,733 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,733 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,733 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,734 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,734 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,734 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,735 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,735 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,736 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,736 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,736 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,736 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,736 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,736 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,736 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,737 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,737 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,738 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,738 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,738 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,738 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,738 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,738 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,738 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,739 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,739 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,739 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,740 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,740 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,740 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,740 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,740 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,740 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,741 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,741 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,741 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,741 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,742 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,742 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,742 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,742 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,742 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,743 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,743 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,743 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,743 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,743 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,743 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,743 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,744 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,744 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,744 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,745 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,745 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,745 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,745 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,745 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,745 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,746 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,746 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,746 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,747 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,747 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,747 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,747 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,747 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,747 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,747 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,748 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,748 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,748 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,749 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,749 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,749 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,749 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,749 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,749 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,749 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,750 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,751 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,751 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,751 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,751 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,751 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,751 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,752 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,752 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,753 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,754 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,754 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,754 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,754 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,755 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,755 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,755 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,755 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,756 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,756 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,756 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,756 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,756 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,756 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,757 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,757 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,757 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,758 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,758 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,758 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,758 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,758 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,758 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,759 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,759 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,759 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,760 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,760 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,760 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,760 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,760 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,761 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,761 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,761 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,761 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,762 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,762 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,763 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,763 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,763 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,763 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,763 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,763 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,764 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,764 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,764 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,765 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,765 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,765 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,765 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,765 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,765 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,766 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,769 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,769 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,770 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,770 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,770 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,770 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,770 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,770 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,770 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,771 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,771 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,772 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,772 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,772 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,772 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 10:34:24,772 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,773 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 10:34:24,773 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,773 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,774 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,774 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,774 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,774 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,774 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,774 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,775 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,775 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,776 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,776 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,777 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,777 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,777 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,777 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,777 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,777 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,777 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,778 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,778 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,779 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,779 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,779 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,779 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,779 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,779 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,779 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,780 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,780 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,781 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,781 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,781 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,781 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,781 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,782 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,782 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,782 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,783 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,783 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,783 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,783 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,783 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 10:34:24,783 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,784 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 10:34:24,784 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,790 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,790 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,790 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,791 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,791 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,791 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,791 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,791 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,791 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,792 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,792 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,793 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,793 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,793 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,793 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,793 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,794 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,794 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,794 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,795 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,795 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,795 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,795 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,795 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,795 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,796 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,796 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,798 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,798 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,798 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,798 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,799 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,799 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,799 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,799 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,799 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,800 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,800 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,800 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,800 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,801 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,801 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,801 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,801 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,801 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,802 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:34:24,802 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:34:24,802 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:34:24,802 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:34:24,803 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:34:24,803 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:34:24,803 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:34:24,804 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:34:24,804 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:34:24,808 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-28 10:34:24,816 INFO L443 ModelExtractionUtils]: Simplification made 5 calls to the SMT solver. [2018-11-28 10:34:24,817 INFO L444 ModelExtractionUtils]: 8 out of 12 variables were initially zero. Simplification set additionally 2 variables to zero. [2018-11-28 10:34:24,818 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-28 10:34:24,819 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-28 10:34:24,819 INFO L518 LassoAnalysis]: Proved termination. [2018-11-28 10:34:24,819 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2018-11-28 10:34:24,820 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-28 10:34:24,884 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:25,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:25,051 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 10:34:25,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:25,107 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 10:34:25,489 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:25,493 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 8 loop predicates [2018-11-28 10:34:25,494 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 63441 states and 118636 transitions. cyclomatic complexity: 55201 Second operand 10 states. [2018-11-28 10:34:29,233 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 63441 states and 118636 transitions. cyclomatic complexity: 55201. Second operand 10 states. Result 215971 states and 402708 transitions. Complement of second has 27 states. [2018-11-28 10:34:29,234 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 14 states 1 stem states 12 non-accepting loop states 1 accepting loop states [2018-11-28 10:34:29,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2018-11-28 10:34:29,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 31851 transitions. [2018-11-28 10:34:29,251 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 31851 transitions. Stem has 133 letters. Loop has 41 letters. [2018-11-28 10:34:29,253 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 10:34:29,253 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 31851 transitions. Stem has 174 letters. Loop has 41 letters. [2018-11-28 10:34:29,254 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 10:34:29,254 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 31851 transitions. Stem has 133 letters. Loop has 82 letters. [2018-11-28 10:34:29,257 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 10:34:29,257 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 215971 states and 402708 transitions. [2018-11-28 10:34:29,902 INFO L131 ngComponentsAnalysis]: Automaton has 24 accepting balls. 78049 [2018-11-28 10:34:30,462 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 215971 states to 215971 states and 402708 transitions. [2018-11-28 10:34:30,462 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 139430 [2018-11-28 10:34:30,563 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 139774 [2018-11-28 10:34:30,564 INFO L73 IsDeterministic]: Start isDeterministic. Operand 215971 states and 402708 transitions. [2018-11-28 10:34:30,583 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:34:30,583 INFO L705 BuchiCegarLoop]: Abstraction has 215971 states and 402708 transitions. [2018-11-28 10:34:30,688 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 215971 states and 402708 transitions. [2018-11-28 10:34:31,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 215971 to 116430. [2018-11-28 10:34:31,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116430 states. [2018-11-28 10:34:31,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116430 states to 116430 states and 217598 transitions. [2018-11-28 10:34:31,854 INFO L728 BuchiCegarLoop]: Abstraction has 116430 states and 217598 transitions. [2018-11-28 10:34:31,855 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 10:34:31,855 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 10:34:31,855 INFO L87 Difference]: Start difference. First operand 116430 states and 217598 transitions. Second operand 3 states. [2018-11-28 10:34:32,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:34:32,870 INFO L93 Difference]: Finished difference Result 198331 states and 370570 transitions. [2018-11-28 10:34:32,871 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 10:34:32,871 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 198331 states and 370570 transitions. [2018-11-28 10:34:33,308 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 74404 [2018-11-28 10:34:33,689 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 198331 states to 198331 states and 370570 transitions. [2018-11-28 10:34:33,690 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 144121 [2018-11-28 10:34:33,765 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 144121 [2018-11-28 10:34:33,765 INFO L73 IsDeterministic]: Start isDeterministic. Operand 198331 states and 370570 transitions. [2018-11-28 10:34:33,781 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:34:33,781 INFO L705 BuchiCegarLoop]: Abstraction has 198331 states and 370570 transitions. [2018-11-28 10:34:33,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198331 states and 370570 transitions. [2018-11-28 10:34:34,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198331 to 116430. [2018-11-28 10:34:34,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116430 states. [2018-11-28 10:34:34,830 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116430 states to 116430 states and 217592 transitions. [2018-11-28 10:34:34,830 INFO L728 BuchiCegarLoop]: Abstraction has 116430 states and 217592 transitions. [2018-11-28 10:34:34,830 INFO L608 BuchiCegarLoop]: Abstraction has 116430 states and 217592 transitions. [2018-11-28 10:34:34,830 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-28 10:34:34,830 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 116430 states and 217592 transitions. [2018-11-28 10:34:35,014 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 37202 [2018-11-28 10:34:35,015 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:34:35,015 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:34:35,018 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:35,018 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:35,018 INFO L794 eck$LassoCheckResult]: Stem: 1484596#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1484597#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 1486010#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 1486011#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 1486782#L1952 assume 0 != main_~tmp~21; 1486668#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 1485484#L2551 assume !(0 == getOrigin_~person); 1485357#L2555 assume !(1 == getOrigin_~person); 1485061#L2559 assume !(2 == getOrigin_~person); 1485062#L2563 assume !(3 == getOrigin_~person); 1485575#L2567 assume !(4 == getOrigin_~person); 1485538#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 1484611#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1484612#L2979 assume 0 == initPersonOnFloor_~floor; 1486759#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1481323#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1485083#L2771 assume !(0 == callOnFloor_~floorID); 1487269#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1487031#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1481701#L2708 assume !(0 == isFloorCalling_~floorID); 1480706#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1480707#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1488839#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1488833#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1488826#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 1488819#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1488820#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1488829#L1134 assume !(0 != timeShift_~tmp___9~2); 1488823#L1225 assume !(1 == ~doorState~0); 1488812#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1488804#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1481705#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1485060#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 1485990#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1485991#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1486936#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1488563#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1488564#L921 assume !(1 == ~currentHeading~0); 1500524#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1483521#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1500511#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1500505#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1489940#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1500501#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 1500495#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 1500492#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1500486#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1489907#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1500483#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1500481#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1500477#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1500469#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 1500457#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 1500453#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1500449#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1500446#L1134-1 assume !(0 != timeShift_~tmp___9~2); 1500444#L1225-3 assume !(1 == ~doorState~0); 1500441#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1500439#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1489877#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1500435#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 1500336#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1500337#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1500331#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1500332#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1489010#L921-3 assume !(1 == ~currentHeading~0); 1489011#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1483341#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1484121#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1503016#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1489001#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1503010#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 1502965#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 1487773#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1481262#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1481263#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1507758#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1485591#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1481194#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1480935#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 1482846#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 1482263#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1485031#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1482786#L1134-2 assume !(0 != timeShift_~tmp___9~2); 1482788#L1225-6 assume !(1 == ~doorState~0); 1486539#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1481205#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1481206#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1485692#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 1485972#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1485973#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1486923#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1488567#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1488568#L921-6 assume !(1 == ~currentHeading~0); 1511008#L931-18 assume !(0 == ~currentFloorID~0); 1484123#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1509597#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1509598#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1509434#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1509435#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 1509425#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 1509424#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 1509419#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 1509414#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1509365#L2979-1 assume 0 == initPersonOnFloor_~floor; 1509310#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1509297#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1509281#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1509277#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1509268#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1509269#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1509264#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1509265#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1509259#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 1509260#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1485553#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1523355#L1134-3 assume !(0 != timeShift_~tmp___9~2); 1523354#L1225-9 assume !(1 == ~doorState~0); 1523353#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1523352#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1523351#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1523350#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 1523349#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1523294#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1523293#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1488553#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1488555#L921-9 assume !(1 == ~currentHeading~0); 1484113#L931-27 assume !(0 == ~currentFloorID~0); 1483297#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1522400#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1522401#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1522396#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1522395#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 1522394#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1522393#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 1522392#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 1522388#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 1522387#L2482-7 cleanup_~i~1 := 0; 1522380#L1757-2 assume !false; 1522382#L1758 [2018-11-28 10:34:35,019 INFO L796 eck$LassoCheckResult]: Loop: 1522382#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1579057#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 1579055#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 1579054#L1765 assume 1 != cleanup_~tmp___0~8; 1578781#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1578780#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1577502#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 1577499#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 1577497#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 1577495#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 1577493#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1577487#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1559704#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1577486#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1577485#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1577475#L2708-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1577464#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 1577457#L954-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 1577449#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1577445#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1577442#L1134-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1577443#L1136-8 assume !(0 != ~persons_0~0); 1591162#L1136-9 assume !(0 != ~persons_1~0); 1591121#L1150-4 assume !(0 != ~persons_2~0); 1591100#L1164-4 assume !(0 != ~persons_3~0); 1591085#L1178-4 assume !(0 != ~persons_4~0); 1591078#L1192-4 assume !(0 != ~persons_5~0); 1587190#L1206-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1587189#L2799-48 assume 0 == isPersonOnFloor_~floor; 1586086#L2800-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1585907#L2971-24 processWaitingOnFloor_#t~ret30 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret30;havoc processWaitingOnFloor_#t~ret30; 1585899#L1035-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 1585869#L1035-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1585868#L2799-50 assume 0 == isPersonOnFloor_~floor; 1581103#L2800-25 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1581071#L2971-25 processWaitingOnFloor_#t~ret32 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret32;havoc processWaitingOnFloor_#t~ret32; 1581069#L1048-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 1581067#L1048-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1581066#L2799-52 assume 0 == isPersonOnFloor_~floor; 1581049#L2800-26 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1581018#L2971-26 processWaitingOnFloor_#t~ret34 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret34;havoc processWaitingOnFloor_#t~ret34; 1581016#L1061-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1581014#L1061-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1581012#L2799-54 assume 0 == isPersonOnFloor_~floor; 1580947#L2800-27 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1580936#L2971-27 processWaitingOnFloor_#t~ret36 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret36;havoc processWaitingOnFloor_#t~ret36; 1580934#L1074-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1580932#L1074-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1580931#L2799-56 assume 0 == isPersonOnFloor_~floor; 1580905#L2800-28 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1580889#L2971-28 processWaitingOnFloor_#t~ret38 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret38;havoc processWaitingOnFloor_#t~ret38; 1580887#L1087-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1580885#L1087-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1580884#L2799-58 assume 0 == isPersonOnFloor_~floor; 1580853#L2800-29 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1580832#L2971-29 processWaitingOnFloor_#t~ret40 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret40;havoc processWaitingOnFloor_#t~ret40; 1580820#L1100-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1580818#L1100-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1580815#L2743-68 assume !(0 == resetCallOnFloor_~floorID); 1580811#L2746-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 1580807#L2755-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1576783#L283-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1576776#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1576775#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1560235#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1576773#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 1576774#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1576770#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 1576769#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 1576767#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 1576766#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 1576763#L1757-2 assume !false; 1522382#L1758 [2018-11-28 10:34:35,023 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:35,023 INFO L82 PathProgramCache]: Analyzing trace with hash -869240195, now seen corresponding path program 1 times [2018-11-28 10:34:35,023 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:35,023 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:35,024 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:35,024 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:35,024 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:35,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:35,101 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:35,102 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:35,102 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:34:35,102 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:34:35,102 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:35,102 INFO L82 PathProgramCache]: Analyzing trace with hash -611585801, now seen corresponding path program 1 times [2018-11-28 10:34:35,102 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:35,102 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:35,103 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:35,103 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:35,103 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:35,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:35,153 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:35,154 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:35,154 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-28 10:34:35,154 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:34:35,154 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-28 10:34:35,154 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-28 10:34:35,154 INFO L87 Difference]: Start difference. First operand 116430 states and 217592 transitions. cyclomatic complexity: 101192 Second operand 8 states. [2018-11-28 10:34:40,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:34:40,148 INFO L93 Difference]: Finished difference Result 465633 states and 869899 transitions. [2018-11-28 10:34:40,149 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2018-11-28 10:34:40,149 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 465633 states and 869899 transitions. [2018-11-28 10:34:41,479 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 141255 [2018-11-28 10:34:42,636 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 465633 states to 465633 states and 869899 transitions. [2018-11-28 10:34:42,636 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 333839 [2018-11-28 10:34:42,831 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 333839 [2018-11-28 10:34:42,831 INFO L73 IsDeterministic]: Start isDeterministic. Operand 465633 states and 869899 transitions. [2018-11-28 10:34:42,892 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:34:42,892 INFO L705 BuchiCegarLoop]: Abstraction has 465633 states and 869899 transitions. [2018-11-28 10:34:43,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 465633 states and 869899 transitions. [2018-11-28 10:34:45,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 465633 to 116010. [2018-11-28 10:34:45,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116010 states. [2018-11-28 10:34:45,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116010 states to 116010 states and 216808 transitions. [2018-11-28 10:34:45,759 INFO L728 BuchiCegarLoop]: Abstraction has 116010 states and 216808 transitions. [2018-11-28 10:34:45,759 INFO L608 BuchiCegarLoop]: Abstraction has 116010 states and 216808 transitions. [2018-11-28 10:34:45,759 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-28 10:34:45,759 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 116010 states and 216808 transitions. [2018-11-28 10:34:45,965 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 37052 [2018-11-28 10:34:45,965 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:34:45,965 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:34:45,968 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:45,968 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:45,969 INFO L794 eck$LassoCheckResult]: Stem: 2066653#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2066654#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 2068046#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 2068047#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 2068846#L1952 assume 0 != main_~tmp~21; 2068741#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 2067526#L2551 assume !(0 == getOrigin_~person); 2067400#L2555 assume !(1 == getOrigin_~person); 2067118#L2559 assume !(2 == getOrigin_~person); 2067119#L2563 assume !(3 == getOrigin_~person); 2067612#L2567 assume !(4 == getOrigin_~person); 2067577#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 2066668#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2066669#L2979 assume 0 == initPersonOnFloor_~floor; 2068822#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2063459#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2067139#L2771 assume !(0 == callOnFloor_~floorID); 2069332#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2069103#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2069532#L2708 assume !(0 == isFloorCalling_~floorID); 2062843#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2062844#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2070902#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2070903#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2069003#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2069004#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2077923#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2077922#L1134 assume !(0 != timeShift_~tmp___9~2); 2077921#L1225 assume !(1 == ~doorState~0); 2077920#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2070907#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2063839#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2067117#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2068026#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2068027#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2069009#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2089988#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2089935#L921 assume !(1 == ~currentHeading~0); 2089936#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2089085#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2066010#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2063779#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2063780#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2067245#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2070831#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2069825#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2063784#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2063785#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2091891#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2091892#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2091886#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2091883#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2091881#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2091879#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2067091#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2064910#L1134-1 assume !(0 != timeShift_~tmp___9~2); 2064912#L1225-3 assume !(1 == ~doorState~0); 2094102#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2094101#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2073161#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2094099#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2094094#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2093989#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2093988#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2093986#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2093987#L921-3 assume !(1 == ~currentHeading~0); 2094828#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2094827#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2090834#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2090833#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2090832#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2070869#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2070870#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2074940#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2074941#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2090817#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2088152#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2088153#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2063333#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2063072#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2067724#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2090810#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2067083#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2064918#L1134-2 assume !(0 != timeShift_~tmp___9~2); 2064920#L1225-6 assume !(1 == ~doorState~0); 2068581#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2063344#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2063345#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2067726#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2068008#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2068009#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2091901#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2091896#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2090069#L921-6 assume !(1 == ~currentHeading~0); 2090062#L931-18 assume !(0 == ~currentFloorID~0); 2089017#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2065990#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2063686#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2063687#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2067708#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2070861#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2069790#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 2067527#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 2066665#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2066666#L2979-1 assume 0 == initPersonOnFloor_~floor; 2068823#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2063465#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2069342#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2069343#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2070969#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2070968#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2070967#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2070966#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2070965#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2070957#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2067592#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2100377#L1134-3 assume !(0 != timeShift_~tmp___9~2); 2100378#L1225-9 assume !(1 == ~doorState~0); 2107242#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2107241#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2107240#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2107239#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2107237#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2107235#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2106943#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2106932#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2106921#L921-9 assume !(1 == ~currentHeading~0); 2106913#L931-27 assume !(0 == ~currentFloorID~0); 2105954#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2105354#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2105355#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2105347#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2105348#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2070825#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2070826#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2110660#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 2110661#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 2110652#L2482-7 cleanup_~i~1 := 0; 2110653#L1757-2 assume !false; 2113192#L1758 [2018-11-28 10:34:45,969 INFO L796 eck$LassoCheckResult]: Loop: 2113192#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2134202#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 2134201#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 2134200#L1765 assume 1 != cleanup_~tmp___0~8; 2134199#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2134198#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2134197#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 2134196#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 2134195#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 2134194#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 2134193#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2134192#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2129478#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2134191#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2134190#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2134189#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2134187#L985-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2134182#L2708-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2134180#L2735-110 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2134177#L954-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2134176#L966-8 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2134175#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2134173#L1134-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2134174#L1136-8 assume !(0 != ~persons_0~0); 2134880#L1136-9 assume !(0 != ~persons_1~0); 2134875#L1150-4 assume !(0 != ~persons_2~0); 2134852#L1164-4 assume !(0 != ~persons_3~0); 2134850#L1178-4 assume !(0 != ~persons_4~0); 2134843#L1192-4 assume !(0 != ~persons_5~0); 2134839#L1206-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2134838#L2799-48 assume 0 == isPersonOnFloor_~floor; 2134817#L2800-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2134797#L2971-24 processWaitingOnFloor_#t~ret30 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret30;havoc processWaitingOnFloor_#t~ret30; 2134789#L1035-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 2134787#L1035-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2134786#L2799-50 assume 0 == isPersonOnFloor_~floor; 2134572#L2800-25 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2134540#L2971-25 processWaitingOnFloor_#t~ret32 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret32;havoc processWaitingOnFloor_#t~ret32; 2134538#L1048-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 2134536#L1048-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2134535#L2799-52 assume 0 == isPersonOnFloor_~floor; 2134527#L2800-26 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2134496#L2971-26 processWaitingOnFloor_#t~ret34 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret34;havoc processWaitingOnFloor_#t~ret34; 2134463#L1061-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2134460#L1061-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2134456#L2799-54 assume 0 == isPersonOnFloor_~floor; 2134416#L2800-27 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2134409#L2971-27 processWaitingOnFloor_#t~ret36 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret36;havoc processWaitingOnFloor_#t~ret36; 2134407#L1074-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2134405#L1074-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2134372#L2799-56 assume 0 == isPersonOnFloor_~floor; 2134318#L2800-28 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2134306#L2971-28 processWaitingOnFloor_#t~ret38 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret38;havoc processWaitingOnFloor_#t~ret38; 2134298#L1087-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2134294#L1087-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2134293#L2799-58 assume 0 == isPersonOnFloor_~floor; 2134267#L2800-29 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2134246#L2971-29 processWaitingOnFloor_#t~ret40 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret40;havoc processWaitingOnFloor_#t~ret40; 2134243#L1100-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2134242#L1100-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2134240#L2743-68 assume !(0 == resetCallOnFloor_~floorID); 2134238#L2746-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2134235#L2755-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2134230#L283-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2134213#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2134212#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2129548#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2134211#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2134210#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2134209#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2134208#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 2134206#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 2134204#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 2134203#L1757-2 assume !false; 2113192#L1758 [2018-11-28 10:34:45,975 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:45,976 INFO L82 PathProgramCache]: Analyzing trace with hash -869240195, now seen corresponding path program 2 times [2018-11-28 10:34:45,976 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:45,976 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:45,976 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:45,976 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:45,977 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:45,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:46,046 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:46,046 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:46,046 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:34:46,047 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:34:46,047 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:46,047 INFO L82 PathProgramCache]: Analyzing trace with hash 1502999967, now seen corresponding path program 1 times [2018-11-28 10:34:46,047 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:46,047 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:46,048 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:46,048 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:34:46,048 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:46,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:46,082 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:46,082 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:46,083 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 10:34:46,083 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:34:46,083 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 10:34:46,083 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 10:34:46,083 INFO L87 Difference]: Start difference. First operand 116010 states and 216808 transitions. cyclomatic complexity: 100828 Second operand 5 states. [2018-11-28 10:34:48,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:34:48,098 INFO L93 Difference]: Finished difference Result 166037 states and 305711 transitions. [2018-11-28 10:34:48,098 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 10:34:48,098 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 166037 states and 305711 transitions. [2018-11-28 10:34:48,494 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 47419 [2018-11-28 10:34:48,821 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 166037 states to 166037 states and 305711 transitions. [2018-11-28 10:34:48,821 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 125825 [2018-11-28 10:34:48,889 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 125825 [2018-11-28 10:34:48,889 INFO L73 IsDeterministic]: Start isDeterministic. Operand 166037 states and 305711 transitions. [2018-11-28 10:34:48,911 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:34:48,911 INFO L705 BuchiCegarLoop]: Abstraction has 166037 states and 305711 transitions. [2018-11-28 10:34:48,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166037 states and 305711 transitions. [2018-11-28 10:34:52,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166037 to 116010. [2018-11-28 10:34:52,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116010 states. [2018-11-28 10:34:53,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116010 states to 116010 states and 214383 transitions. [2018-11-28 10:34:53,081 INFO L728 BuchiCegarLoop]: Abstraction has 116010 states and 214383 transitions. [2018-11-28 10:34:53,081 INFO L608 BuchiCegarLoop]: Abstraction has 116010 states and 214383 transitions. [2018-11-28 10:34:53,081 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-28 10:34:53,081 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 116010 states and 214383 transitions. [2018-11-28 10:34:53,266 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 37052 [2018-11-28 10:34:53,266 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:34:53,266 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:34:53,267 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:53,267 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:53,267 INFO L794 eck$LassoCheckResult]: Stem: 2348833#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2348834#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 2350311#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 2350312#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 2351123#L1952 assume 0 != main_~tmp~21; 2351006#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 2349765#L2551 assume !(0 == getOrigin_~person); 2349622#L2555 assume !(1 == getOrigin_~person); 2349325#L2559 assume !(2 == getOrigin_~person); 2349326#L2563 assume !(3 == getOrigin_~person); 2349862#L2567 assume !(4 == getOrigin_~person); 2349827#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 2348848#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2348849#L2979 assume 0 == initPersonOnFloor_~floor; 2351102#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2345521#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2349347#L2771 assume !(0 == callOnFloor_~floorID); 2351631#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2351394#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2351848#L2708 assume !(0 == isFloorCalling_~floorID); 2353310#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2356236#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2356235#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2356233#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2356234#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2356215#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2356213#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2356211#L1134 assume !(0 != timeShift_~tmp___9~2); 2356210#L1225 assume !(1 == ~doorState~0); 2356209#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2356208#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2349323#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2349324#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2350291#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2350292#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2352968#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2352945#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2352946#L921 assume !(1 == ~currentHeading~0); 2356922#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2347740#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2348129#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2345842#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2345843#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2356896#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2356893#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2356892#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2355743#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2355742#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2355741#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2355740#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2345829#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2344755#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2347047#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2346436#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2349746#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2362842#L1134-1 assume !(0 != timeShift_~tmp___9~2); 2362832#L1225-3 assume !(1 == ~doorState~0); 2362828#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2362827#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2353490#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2362821#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2362813#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2362425#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2362426#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2362420#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2362422#L921-3 assume !(1 == ~currentHeading~0); 2371382#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2347556#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2348331#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2345457#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2345458#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2349994#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2375397#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2375395#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2375394#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2366632#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2375393#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2375392#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2375386#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2375377#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2375373#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2375368#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2375369#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2380611#L1134-2 assume !(0 != timeShift_~tmp___9~2); 2380610#L1225-6 assume !(1 == ~doorState~0); 2380609#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2380608#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2369631#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2380607#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2380606#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2375332#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2375331#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2375330#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2347952#L921-6 assume !(1 == ~currentHeading~0); 2347953#L931-18 assume !(0 == ~currentFloorID~0); 2348333#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2348325#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2382024#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2365742#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2381951#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2381944#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2381942#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 2381940#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 2381935#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2381932#L2979-1 assume 0 == initPersonOnFloor_~floor; 2381904#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2381889#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2378977#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2378967#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2376571#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2376563#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2376546#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2376440#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2376439#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2371377#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2371378#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2383346#L1134-3 assume !(0 != timeShift_~tmp___9~2); 2383345#L1225-9 assume !(1 == ~doorState~0); 2383344#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2383343#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2383342#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2383341#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2383332#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2383333#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2389862#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2389860#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2389861#L921-9 assume !(1 == ~currentHeading~0); 2358077#L931-27 assume !(0 == ~currentFloorID~0); 2347513#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2348205#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2348206#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2386629#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2353188#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2353160#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2353161#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2352341#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 2352342#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 2353158#L2482-7 cleanup_~i~1 := 0; 2353159#L1757-2 assume !false; 2421989#L1758 [2018-11-28 10:34:53,268 INFO L796 eck$LassoCheckResult]: Loop: 2421989#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2446962#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 2444708#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 2444707#L1765 assume 1 != cleanup_~tmp___0~8; 2444706#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2444705#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2444704#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 2444703#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 2444702#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 2444701#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 2444700#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2444699#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2429093#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2444698#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2444697#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2444696#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2444694#L985-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2444689#L2708-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2444687#L2735-110 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2444684#L954-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2444683#L966-8 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2444682#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2444680#L1134-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2444681#L1136-8 assume !(0 != ~persons_0~0); 2447648#L1136-9 assume !(0 != ~persons_1~0); 2447644#L1150-4 assume !(0 != ~persons_2~0); 2447636#L1164-4 assume !(0 != ~persons_3~0); 2447610#L1178-4 assume !(0 != ~persons_4~0); 2447602#L1192-4 assume !(0 != ~persons_5~0); 2447590#L1206-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2447589#L2799-48 assume 0 == isPersonOnFloor_~floor; 2447574#L2800-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2447554#L2971-24 processWaitingOnFloor_#t~ret30 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret30;havoc processWaitingOnFloor_#t~ret30; 2447546#L1035-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 2447426#L1035-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2447424#L2799-50 assume 0 == isPersonOnFloor_~floor; 2447423#L2800-25 assume !(0 == isPersonOnFloor_~person); 2447410#L2804-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2447385#L2971-25 processWaitingOnFloor_#t~ret32 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret32;havoc processWaitingOnFloor_#t~ret32; 2447377#L1048-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 2447375#L1048-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2447317#L2799-52 assume 0 == isPersonOnFloor_~floor; 2447318#L2800-26 assume !(0 == isPersonOnFloor_~person); 2447276#L2804-26 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2447269#L2971-26 processWaitingOnFloor_#t~ret34 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret34;havoc processWaitingOnFloor_#t~ret34; 2447267#L1061-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2447265#L1061-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2447263#L2799-54 assume 0 == isPersonOnFloor_~floor; 2447262#L2800-27 assume !(0 == isPersonOnFloor_~person); 2447124#L2804-27 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2447113#L2971-27 processWaitingOnFloor_#t~ret36 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret36;havoc processWaitingOnFloor_#t~ret36; 2447111#L1074-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2447109#L1074-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2447107#L2799-56 assume 0 == isPersonOnFloor_~floor; 2447108#L2800-28 assume !(0 == isPersonOnFloor_~person); 2447071#L2804-28 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2447060#L2971-28 processWaitingOnFloor_#t~ret38 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret38;havoc processWaitingOnFloor_#t~ret38; 2447052#L1087-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2447050#L1087-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2447048#L2799-58 assume 0 == isPersonOnFloor_~floor; 2447049#L2800-29 assume !(0 == isPersonOnFloor_~person); 2447025#L2804-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2447006#L2971-29 processWaitingOnFloor_#t~ret40 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret40;havoc processWaitingOnFloor_#t~ret40; 2447003#L1100-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2447002#L1100-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2447001#L2743-68 assume !(0 == resetCallOnFloor_~floorID); 2446999#L2746-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2446996#L2755-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2446991#L283-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2446986#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2446985#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2432078#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2446984#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2446983#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2446982#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2446981#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 2446979#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 2446977#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 2446976#L1757-2 assume !false; 2421989#L1758 [2018-11-28 10:34:53,274 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:53,274 INFO L82 PathProgramCache]: Analyzing trace with hash -869240195, now seen corresponding path program 3 times [2018-11-28 10:34:53,274 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:53,274 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:53,274 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:53,274 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:53,274 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:53,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:53,337 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:53,338 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:53,338 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:34:53,338 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:34:53,338 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:53,338 INFO L82 PathProgramCache]: Analyzing trace with hash 2103461933, now seen corresponding path program 1 times [2018-11-28 10:34:53,338 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:53,338 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:53,339 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:53,339 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:34:53,339 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:53,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:53,360 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:53,360 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:53,360 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:34:53,361 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:34:53,361 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 10:34:53,361 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 10:34:53,361 INFO L87 Difference]: Start difference. First operand 116010 states and 214383 transitions. cyclomatic complexity: 98403 Second operand 3 states. [2018-11-28 10:34:55,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:34:55,168 INFO L93 Difference]: Finished difference Result 197193 states and 362890 transitions. [2018-11-28 10:34:55,168 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 10:34:55,169 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 197193 states and 362890 transitions. [2018-11-28 10:34:55,592 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 64105 [2018-11-28 10:34:55,946 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 197193 states to 197193 states and 362890 transitions. [2018-11-28 10:34:55,946 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 149829 [2018-11-28 10:34:56,012 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 149829 [2018-11-28 10:34:56,013 INFO L73 IsDeterministic]: Start isDeterministic. Operand 197193 states and 362890 transitions. [2018-11-28 10:34:56,013 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:34:56,013 INFO L705 BuchiCegarLoop]: Abstraction has 197193 states and 362890 transitions. [2018-11-28 10:34:56,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197193 states and 362890 transitions. [2018-11-28 10:34:56,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197193 to 114555. [2018-11-28 10:34:56,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 114555 states. [2018-11-28 10:34:57,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114555 states to 114555 states and 210503 transitions. [2018-11-28 10:34:57,652 INFO L728 BuchiCegarLoop]: Abstraction has 114555 states and 210503 transitions. [2018-11-28 10:34:57,652 INFO L608 BuchiCegarLoop]: Abstraction has 114555 states and 210503 transitions. [2018-11-28 10:34:57,652 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-28 10:34:57,652 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 114555 states and 210503 transitions. [2018-11-28 10:34:57,826 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 36557 [2018-11-28 10:34:57,826 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:34:57,826 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:34:57,827 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:57,828 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:34:57,828 INFO L794 eck$LassoCheckResult]: Stem: 2664605#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2664606#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 2658957#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 2658958#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 2661525#L1952 assume 0 != main_~tmp~21; 2661209#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 2661210#L2551 assume !(0 == getOrigin_~person); 2665585#L2555 assume !(1 == getOrigin_~person); 2665233#L2559 assume !(2 == getOrigin_~person); 2665234#L2563 assume !(3 == getOrigin_~person); 2666174#L2567 assume !(4 == getOrigin_~person); 2666109#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 2664637#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2661478#L2979 assume 0 == initPersonOnFloor_~floor; 2661404#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2659020#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2662951#L2771 assume !(0 == callOnFloor_~floorID); 2662680#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2662077#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2659603#L2708 assume !(0 == isFloorCalling_~floorID); 2659605#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2668432#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2668435#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2668426#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2668427#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2668409#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2668407#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2668406#L1134 assume !(0 != timeShift_~tmp___9~2); 2668405#L1225 assume !(1 == ~doorState~0); 2668404#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2668402#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2668403#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2666235#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2658610#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2658611#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2669235#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2669234#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2669232#L921 assume !(1 == ~currentHeading~0); 2667052#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2662611#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2670350#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2670349#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2666651#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2670347#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2670342#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2670341#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2670340#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2666648#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2670339#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2670338#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2659511#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2657976#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2661410#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2660374#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2665847#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2681472#L1134-1 assume !(0 != timeShift_~tmp___9~2); 2681464#L1225-3 assume !(1 == ~doorState~0); 2681461#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2681460#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2667024#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2679496#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2679494#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2678945#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2678944#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2678936#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2678935#L921-3 assume !(1 == ~currentHeading~0); 2678685#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2678676#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2678670#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2678687#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2671171#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2678666#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2678660#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2678657#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2678656#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2671236#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2678654#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2678653#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2678651#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2678643#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2678612#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2678611#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2678609#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2678606#L1134-2 assume !(0 != timeShift_~tmp___9~2); 2678605#L1225-6 assume !(1 == ~doorState~0); 2678599#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2678175#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2671238#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2678174#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2678171#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2677939#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2677936#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2677885#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2677868#L921-6 assume !(1 == ~currentHeading~0); 2677860#L931-18 assume !(0 == ~currentFloorID~0); 2677856#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2677848#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2694720#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2671203#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2694719#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2694714#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2694712#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 2694710#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 2694705#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2694704#L2979-1 assume 0 == initPersonOnFloor_~floor; 2672344#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2672331#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2672312#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2672306#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2672303#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2672302#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2672301#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2672298#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2672297#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2672295#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2666123#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2699098#L1134-3 assume !(0 != timeShift_~tmp___9~2); 2699093#L1225-9 assume !(1 == ~doorState~0); 2699094#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2701471#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2701469#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2701468#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2701467#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2701466#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2701465#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2701463#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2701462#L921-9 assume !(1 == ~currentHeading~0); 2663559#L931-27 assume !(0 == ~currentFloorID~0); 2662295#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2701449#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2701443#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2701442#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2701440#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2701441#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2705035#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2705034#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 2701432#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 2701431#L2482-7 cleanup_~i~1 := 0; 2701425#L1757-2 assume !false; 2701426#L1758 [2018-11-28 10:34:57,828 INFO L796 eck$LassoCheckResult]: Loop: 2701426#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2765110#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 2765108#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 2765106#L1765 assume 1 != cleanup_~tmp___0~8; 2765104#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2765102#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2765100#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 2765098#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 2765096#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 2765094#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 2765092#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2765090#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2735951#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2765087#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2765085#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2765083#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2765082#L985-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2659092#L2708-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2659093#L2735-110 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2661607#L954-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2660324#L966-8 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2665836#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2661319#L1134-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2661320#L1136-8 assume !(0 != ~persons_0~0); 2769285#L1136-9 assume !(0 != ~persons_1~0); 2769281#L1150-4 assume !(0 != ~persons_2~0); 2769069#L1164-4 assume !(0 != ~persons_3~0); 2769062#L1178-4 assume !(0 != ~persons_4~0); 2769052#L1192-4 assume !(0 != ~persons_5~0); 2768617#L1206-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2768616#L2799-48 assume 0 == isPersonOnFloor_~floor; 2768599#L2800-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2768544#L2971-24 processWaitingOnFloor_#t~ret30 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret30;havoc processWaitingOnFloor_#t~ret30; 2768542#L1035-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 2768540#L1035-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2768538#L2799-50 assume 0 == isPersonOnFloor_~floor; 2768537#L2800-25 assume !(0 == isPersonOnFloor_~person); 2768527#L2804-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2768503#L2971-25 processWaitingOnFloor_#t~ret32 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret32;havoc processWaitingOnFloor_#t~ret32; 2766942#L1048-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 2766884#L1048-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2766879#L2799-52 assume 0 == isPersonOnFloor_~floor; 2766880#L2800-26 assume !(0 == isPersonOnFloor_~person); 2766882#L2804-26 assume !(1 == isPersonOnFloor_~person); 2766851#L2808-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2766849#L2971-26 processWaitingOnFloor_#t~ret34 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret34;havoc processWaitingOnFloor_#t~ret34; 2766847#L1061-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2766845#L1061-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2766844#L2799-54 assume 0 == isPersonOnFloor_~floor; 2766835#L2800-27 assume !(0 == isPersonOnFloor_~person); 2766813#L2804-27 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2766808#L2971-27 processWaitingOnFloor_#t~ret36 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret36;havoc processWaitingOnFloor_#t~ret36; 2766230#L1074-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2758843#L1074-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2758840#L2799-56 assume 0 == isPersonOnFloor_~floor; 2758839#L2800-28 assume !(0 == isPersonOnFloor_~person); 2758818#L2804-28 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2758808#L2971-28 processWaitingOnFloor_#t~ret38 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret38;havoc processWaitingOnFloor_#t~ret38; 2758807#L1087-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2756549#L1087-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2756545#L2799-58 assume 0 == isPersonOnFloor_~floor; 2756543#L2800-29 assume !(0 == isPersonOnFloor_~person); 2756525#L2804-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2756512#L2971-29 processWaitingOnFloor_#t~ret40 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret40;havoc processWaitingOnFloor_#t~ret40; 2756503#L1100-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2756496#L1100-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2756486#L2743-68 assume !(0 == resetCallOnFloor_~floorID); 2756487#L2746-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2765783#L2755-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2765520#L283-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2753106#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2765517#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2736020#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2765514#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2765481#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2765478#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2765122#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 2765117#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 2765114#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 2765112#L1757-2 assume !false; 2701426#L1758 [2018-11-28 10:34:57,835 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:57,836 INFO L82 PathProgramCache]: Analyzing trace with hash -869240195, now seen corresponding path program 4 times [2018-11-28 10:34:57,836 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:57,836 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:57,836 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:57,836 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:34:57,836 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:57,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:57,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:57,910 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:57,911 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:34:57,911 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:34:57,911 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:34:57,911 INFO L82 PathProgramCache]: Analyzing trace with hash -379125459, now seen corresponding path program 1 times [2018-11-28 10:34:57,911 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:34:57,911 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:34:57,912 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:57,912 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:34:57,912 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:34:57,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:34:57,942 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:34:57,942 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:34:57,943 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:34:57,943 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:34:57,943 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 10:34:57,943 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 10:34:57,943 INFO L87 Difference]: Start difference. First operand 114555 states and 210503 transitions. cyclomatic complexity: 95978 Second operand 3 states. [2018-11-28 10:34:59,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:34:59,102 INFO L93 Difference]: Finished difference Result 189239 states and 346303 transitions. [2018-11-28 10:34:59,102 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 10:34:59,102 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 189239 states and 346303 transitions. [2018-11-28 10:34:59,570 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 61399 [2018-11-28 10:34:59,971 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 189239 states to 189239 states and 346303 transitions. [2018-11-28 10:34:59,971 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 143679 [2018-11-28 10:35:00,057 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 143679 [2018-11-28 10:35:00,057 INFO L73 IsDeterministic]: Start isDeterministic. Operand 189239 states and 346303 transitions. [2018-11-28 10:35:00,068 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:35:00,068 INFO L705 BuchiCegarLoop]: Abstraction has 189239 states and 346303 transitions. [2018-11-28 10:35:00,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189239 states and 346303 transitions. [2018-11-28 10:35:01,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189239 to 113585. [2018-11-28 10:35:01,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 113585 states. [2018-11-28 10:35:01,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113585 states to 113585 states and 207108 transitions. [2018-11-28 10:35:01,508 INFO L728 BuchiCegarLoop]: Abstraction has 113585 states and 207108 transitions. [2018-11-28 10:35:01,508 INFO L608 BuchiCegarLoop]: Abstraction has 113585 states and 207108 transitions. [2018-11-28 10:35:01,508 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-28 10:35:01,508 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 113585 states and 207108 transitions. [2018-11-28 10:35:01,708 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 36227 [2018-11-28 10:35:01,708 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:35:01,708 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:35:01,710 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:01,710 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:01,710 INFO L794 eck$LassoCheckResult]: Stem: 2968368#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2968369#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 2962752#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 2962753#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 2965300#L1952 assume 0 != main_~tmp~21; 2964982#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 2964983#L2551 assume !(0 == getOrigin_~person); 2969347#L2555 assume !(1 == getOrigin_~person); 2968996#L2559 assume !(2 == getOrigin_~person); 2968997#L2563 assume !(3 == getOrigin_~person); 2969864#L2567 assume !(4 == getOrigin_~person); 2969804#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 2968400#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2965250#L2979 assume 0 == initPersonOnFloor_~floor; 2965177#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2962815#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2966719#L2771 assume !(0 == callOnFloor_~floorID); 2966443#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2965862#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2967360#L2708 assume !(0 == isFloorCalling_~floorID); 2962068#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2962069#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2970090#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2970088#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2970082#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2970075#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2970076#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2970083#L1134 assume !(0 != timeShift_~tmp___9~2); 2970078#L1225 assume !(1 == ~doorState~0); 2970070#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2970062#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2963404#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2968995#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2962416#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2962417#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2965604#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2972957#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2972955#L921 assume !(1 == ~currentHeading~0); 2971529#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2966377#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2994395#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2994394#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2970272#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2994393#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2994387#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2994386#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2994385#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2970268#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2994384#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2994383#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2994375#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2994371#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2965182#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2964159#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2968930#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2965069#L1134-1 assume !(0 != timeShift_~tmp___9~2); 2964665#L1225-3 assume !(1 == ~doorState~0); 2964666#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2963295#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2963296#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2969141#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2962329#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2962330#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2965534#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2969518#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2969519#L921-3 assume !(1 == ~currentHeading~0); 2999456#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2966130#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2967338#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2991246#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2977348#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2991245#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2991240#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2991227#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2991221#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2977324#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2991220#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2991219#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2991169#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2991165#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 2991160#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 2991158#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2991157#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2991149#L1134-2 assume !(0 != timeShift_~tmp___9~2); 2991150#L1225-6 assume !(1 == ~doorState~0); 2999720#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2999719#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2977428#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2999718#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2999716#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2999717#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2997485#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2997478#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 2997476#L921-6 assume !(1 == ~currentHeading~0); 2997457#L931-18 assume !(0 == ~currentFloorID~0); 2966120#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2967324#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2986621#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2986620#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2986619#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 2986614#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 2986612#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 2986610#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 2986605#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2986604#L2979-1 assume 0 == initPersonOnFloor_~floor; 2986584#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2986539#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2986531#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2986526#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2986473#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2986472#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2986440#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2986437#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2986233#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2986204#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2968923#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 2965081#L1134-3 assume !(0 != timeShift_~tmp___9~2); 2964639#L1225-9 assume !(1 == ~doorState~0); 2964167#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2963086#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2963087#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2969908#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2962376#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2962377#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3002605#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3002603#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3002601#L921-9 assume !(1 == ~currentHeading~0); 2967325#L931-27 assume !(0 == ~currentFloorID~0); 2966071#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3002589#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3002587#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3002585#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3002586#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3013755#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3013752#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 3013750#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 3013748#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 3013746#L2482-7 cleanup_~i~1 := 0; 3013739#L1757-2 assume !false; 3013740#L1758 [2018-11-28 10:35:01,710 INFO L796 eck$LassoCheckResult]: Loop: 3013740#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3057789#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 3057787#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 3057785#L1765 assume 1 != cleanup_~tmp___0~8; 3057783#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3057781#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3057779#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 3057777#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 3057775#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3057773#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 3057771#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3057770#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3046231#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3057767#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3057757#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3057755#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3057710#L985-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3057701#L2708-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3056621#L2735-110 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 3056121#L954-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 3056119#L966-8 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3056117#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3056114#L1134-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3056115#L1136-8 assume !(0 != ~persons_0~0); 3061482#L1136-9 assume !(0 != ~persons_1~0); 3061472#L1150-4 assume !(0 != ~persons_2~0); 3061378#L1164-4 assume !(0 != ~persons_3~0); 3061275#L1178-4 assume !(0 != ~persons_4~0); 3061270#L1192-4 assume !(0 != ~persons_5~0); 3061226#L1206-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3061225#L2799-48 assume 0 == isPersonOnFloor_~floor; 3061208#L2800-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3061188#L2971-24 processWaitingOnFloor_#t~ret30 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret30;havoc processWaitingOnFloor_#t~ret30; 3061180#L1035-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 3061105#L1035-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3061102#L2799-50 assume 0 == isPersonOnFloor_~floor; 3061103#L2800-25 assume !(0 == isPersonOnFloor_~person); 3061092#L2804-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3061066#L2971-25 processWaitingOnFloor_#t~ret32 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret32;havoc processWaitingOnFloor_#t~ret32; 3061056#L1048-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 3060932#L1048-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3060928#L2799-52 assume 0 == isPersonOnFloor_~floor; 3060929#L2800-26 assume !(0 == isPersonOnFloor_~person); 3060927#L2804-26 assume !(1 == isPersonOnFloor_~person); 3060897#L2808-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3060889#L2971-26 processWaitingOnFloor_#t~ret34 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret34;havoc processWaitingOnFloor_#t~ret34; 3060887#L1061-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3060885#L1061-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3060882#L2799-54 assume 0 == isPersonOnFloor_~floor; 3060883#L2800-27 assume !(0 == isPersonOnFloor_~person); 3060917#L2804-27 assume !(1 == isPersonOnFloor_~person); 3060907#L2808-27 assume !(2 == isPersonOnFloor_~person); 3060866#L2812-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3060863#L2971-27 processWaitingOnFloor_#t~ret36 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret36;havoc processWaitingOnFloor_#t~ret36; 3060861#L1074-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3060859#L1074-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3060857#L2799-56 assume 0 == isPersonOnFloor_~floor; 3060858#L2800-28 assume !(0 == isPersonOnFloor_~person); 3060833#L2804-28 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3060823#L2971-28 processWaitingOnFloor_#t~ret38 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret38;havoc processWaitingOnFloor_#t~ret38; 3060815#L1087-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3058177#L1087-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3058175#L2799-58 assume 0 == isPersonOnFloor_~floor; 3058176#L2800-29 assume !(0 == isPersonOnFloor_~person); 3058153#L2804-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3058139#L2971-29 processWaitingOnFloor_#t~ret40 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret40;havoc processWaitingOnFloor_#t~ret40; 3058106#L1100-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3058103#L1100-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3058101#L2743-68 assume !(0 == resetCallOnFloor_~floorID); 3058099#L2746-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 3058096#L2755-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3057879#L283-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3055780#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3057873#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3046501#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3057871#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3057864#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3057817#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 3057812#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 3057796#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 3057793#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 3055765#L1757-2 assume !false; 3013740#L1758 [2018-11-28 10:35:01,720 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:01,720 INFO L82 PathProgramCache]: Analyzing trace with hash -869240195, now seen corresponding path program 5 times [2018-11-28 10:35:01,720 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:01,720 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:01,721 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:01,721 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:01,721 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:01,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:01,805 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:01,805 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:01,806 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:35:01,806 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:35:01,806 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:01,806 INFO L82 PathProgramCache]: Analyzing trace with hash -345488152, now seen corresponding path program 1 times [2018-11-28 10:35:01,806 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:01,806 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:01,807 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:01,807 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:35:01,807 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:01,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:01,826 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:01,826 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:01,826 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:35:01,827 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:35:01,827 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 10:35:01,827 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 10:35:01,827 INFO L87 Difference]: Start difference. First operand 113585 states and 207108 transitions. cyclomatic complexity: 93553 Second operand 3 states. [2018-11-28 10:35:02,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:35:02,921 INFO L93 Difference]: Finished difference Result 181770 states and 330201 transitions. [2018-11-28 10:35:02,921 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 10:35:02,921 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 181770 states and 330201 transitions. [2018-11-28 10:35:03,652 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 58858 [2018-11-28 10:35:03,980 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 181770 states to 181770 states and 330201 transitions. [2018-11-28 10:35:03,980 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 137904 [2018-11-28 10:35:04,044 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 137904 [2018-11-28 10:35:04,044 INFO L73 IsDeterministic]: Start isDeterministic. Operand 181770 states and 330201 transitions. [2018-11-28 10:35:04,046 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:35:04,046 INFO L705 BuchiCegarLoop]: Abstraction has 181770 states and 330201 transitions. [2018-11-28 10:35:04,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181770 states and 330201 transitions. [2018-11-28 10:35:04,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181770 to 113100. [2018-11-28 10:35:04,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 113100 states. [2018-11-28 10:35:05,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113100 states to 113100 states and 204198 transitions. [2018-11-28 10:35:05,078 INFO L728 BuchiCegarLoop]: Abstraction has 113100 states and 204198 transitions. [2018-11-28 10:35:05,078 INFO L608 BuchiCegarLoop]: Abstraction has 113100 states and 204198 transitions. [2018-11-28 10:35:05,078 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-28 10:35:05,078 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 113100 states and 204198 transitions. [2018-11-28 10:35:05,279 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 36062 [2018-11-28 10:35:05,279 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:35:05,279 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:35:05,280 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:05,280 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:05,280 INFO L794 eck$LassoCheckResult]: Stem: 3263717#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3263718#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 3258104#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 3258105#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 3260653#L1952 assume 0 != main_~tmp~21; 3260341#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 3260342#L2551 assume !(0 == getOrigin_~person); 3264677#L2555 assume !(1 == getOrigin_~person); 3264338#L2559 assume !(2 == getOrigin_~person); 3264339#L2563 assume !(3 == getOrigin_~person); 3265224#L2567 assume !(4 == getOrigin_~person); 3265155#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 3263749#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3260605#L2979 assume 0 == initPersonOnFloor_~floor; 3260533#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3258169#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3262063#L2771 assume !(0 == callOnFloor_~floorID); 3261787#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3261206#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3258739#L2708 assume !(0 == isFloorCalling_~floorID); 3258741#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3266194#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3266197#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3266188#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3266189#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3266171#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3266169#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3266167#L1134 assume !(0 != timeShift_~tmp___9~2); 3266166#L1225 assume !(1 == ~doorState~0); 3266165#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3266164#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3258745#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3264337#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3265285#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3260948#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3260949#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3264854#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3264855#L921 assume !(1 == ~currentHeading~0); 3269321#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3261719#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3269316#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3278128#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3265675#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3278127#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3278121#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 3278118#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3278115#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3265672#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3278111#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3278109#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3278101#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3278097#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 3278093#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 3278090#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3278088#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3278085#L1134-1 assume !(0 != timeShift_~tmp___9~2); 3278083#L1225-3 assume !(1 == ~doorState~0); 3278082#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3278081#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3265707#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3278075#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3278072#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3278051#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3278050#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3278043#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3277618#L921-3 assume !(1 == ~currentHeading~0); 3277614#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3276917#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3276911#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3284905#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3265714#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3284897#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3284892#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 3284884#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3284875#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3270157#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3284836#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3283630#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3258016#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3257763#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 3260541#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 3259542#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3264270#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3260436#L1134-2 assume !(0 != timeShift_~tmp___9~2); 3259972#L1225-6 assume !(1 == ~doorState~0); 3259973#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3258027#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3258028#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3276830#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3276829#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3276208#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3276206#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3276203#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3275827#L921-6 assume !(1 == ~currentHeading~0); 3275749#L931-18 assume !(0 == ~currentFloorID~0); 3270363#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3270355#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3291868#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3291865#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3291864#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3291860#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 3291859#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 3270333#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 3270328#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3270326#L2979-1 assume 0 == initPersonOnFloor_~floor; 3270242#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3270229#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3270213#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3270204#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3270205#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3270198#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3270199#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3270194#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3270195#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3270190#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3265173#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3296478#L1134-3 assume !(0 != timeShift_~tmp___9~2); 3296476#L1225-9 assume !(1 == ~doorState~0); 3296475#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3296474#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3296447#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3296434#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3296413#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3296414#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3314218#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3314217#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3314188#L921-9 assume !(1 == ~currentHeading~0); 3262671#L931-27 assume !(0 == ~currentFloorID~0); 3261414#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3314168#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3314164#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3265710#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3314161#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3314162#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3314157#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 3314158#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 3314151#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 3314150#L2482-7 cleanup_~i~1 := 0; 3314144#L1757-2 assume !false; 3314145#L1758 [2018-11-28 10:35:05,281 INFO L796 eck$LassoCheckResult]: Loop: 3314145#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3343975#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 3343973#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 3343971#L1765 assume 1 != cleanup_~tmp___0~8; 3343969#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3343967#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3343965#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 3343963#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 3343962#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3343958#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 3343954#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3343952#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3337320#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3343845#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3343844#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3343843#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3343841#L985-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3343840#L2708-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3343835#L2735-110 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 3343831#L954-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 3343830#L966-8 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3343829#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3343827#L1134-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3343828#L1136-8 assume !(0 != ~persons_0~0); 3345071#L1136-9 assume !(0 != ~persons_1~0); 3345066#L1150-4 assume !(0 != ~persons_2~0); 3344936#L1164-4 assume !(0 != ~persons_3~0); 3344933#L1178-4 assume !(0 != ~persons_4~0); 3344928#L1192-4 assume !(0 != ~persons_5~0); 3344488#L1206-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3344487#L2799-48 assume 0 == isPersonOnFloor_~floor; 3344470#L2800-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3344445#L2971-24 processWaitingOnFloor_#t~ret30 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret30;havoc processWaitingOnFloor_#t~ret30; 3344435#L1035-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 3344428#L1035-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3344425#L2799-50 assume 0 == isPersonOnFloor_~floor; 3344426#L2800-25 assume !(0 == isPersonOnFloor_~person); 3344415#L2804-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3344391#L2971-25 processWaitingOnFloor_#t~ret32 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret32;havoc processWaitingOnFloor_#t~ret32; 3344371#L1048-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 3344274#L1048-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3344272#L2799-52 assume 0 == isPersonOnFloor_~floor; 3344271#L2800-26 assume !(0 == isPersonOnFloor_~person); 3344270#L2804-26 assume !(1 == isPersonOnFloor_~person); 3344178#L2808-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3344170#L2971-26 processWaitingOnFloor_#t~ret34 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret34;havoc processWaitingOnFloor_#t~ret34; 3344168#L1061-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3344165#L1061-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3344161#L2799-54 assume 0 == isPersonOnFloor_~floor; 3344160#L2800-27 assume !(0 == isPersonOnFloor_~person); 3344159#L2804-27 assume !(1 == isPersonOnFloor_~person); 3344157#L2808-27 assume !(2 == isPersonOnFloor_~person); 3344140#L2812-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3344130#L2971-27 processWaitingOnFloor_#t~ret36 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret36;havoc processWaitingOnFloor_#t~ret36; 3344112#L1074-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3344108#L1074-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3344104#L2799-56 assume 0 == isPersonOnFloor_~floor; 3344102#L2800-28 assume !(0 == isPersonOnFloor_~person); 3344100#L2804-28 assume !(1 == isPersonOnFloor_~person); 3344098#L2808-28 assume !(2 == isPersonOnFloor_~person); 3344096#L2812-28 assume !(3 == isPersonOnFloor_~person); 3344084#L2816-28 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3344081#L2971-28 processWaitingOnFloor_#t~ret38 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret38;havoc processWaitingOnFloor_#t~ret38; 3344073#L1087-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3344071#L1087-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3344068#L2799-58 assume 0 == isPersonOnFloor_~floor; 3344066#L2800-29 assume !(0 == isPersonOnFloor_~person); 3344047#L2804-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3344027#L2971-29 processWaitingOnFloor_#t~ret40 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret40;havoc processWaitingOnFloor_#t~ret40; 3344023#L1100-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3344021#L1100-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3344018#L2743-68 assume !(0 == resetCallOnFloor_~floorID); 3344015#L2746-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 3344011#L2755-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3344001#L283-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3343996#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3343995#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3337537#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3343992#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3343990#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3343988#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 3343986#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 3343983#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 3343980#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 3343978#L1757-2 assume !false; 3314145#L1758 [2018-11-28 10:35:05,289 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:05,289 INFO L82 PathProgramCache]: Analyzing trace with hash -869240195, now seen corresponding path program 6 times [2018-11-28 10:35:05,290 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:05,290 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:05,290 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:05,290 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:05,290 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:05,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:05,387 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:05,387 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:05,388 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:35:05,388 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:35:05,388 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:05,388 INFO L82 PathProgramCache]: Analyzing trace with hash 1969022823, now seen corresponding path program 1 times [2018-11-28 10:35:05,388 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:05,388 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:05,389 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:05,389 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:35:05,389 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:05,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:05,415 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:05,416 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:05,416 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 10:35:05,416 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:35:05,416 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 10:35:05,416 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 10:35:05,416 INFO L87 Difference]: Start difference. First operand 113100 states and 204198 transitions. cyclomatic complexity: 91128 Second operand 3 states. [2018-11-28 10:35:06,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:35:06,695 INFO L93 Difference]: Finished difference Result 169908 states and 306090 transitions. [2018-11-28 10:35:06,695 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 10:35:06,695 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 169908 states and 306090 transitions. [2018-11-28 10:35:07,099 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 48772 [2018-11-28 10:35:07,409 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 169908 states to 169908 states and 306090 transitions. [2018-11-28 10:35:07,409 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 128848 [2018-11-28 10:35:07,473 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 128848 [2018-11-28 10:35:07,473 INFO L73 IsDeterministic]: Start isDeterministic. Operand 169908 states and 306090 transitions. [2018-11-28 10:35:07,477 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:35:07,477 INFO L705 BuchiCegarLoop]: Abstraction has 169908 states and 306090 transitions. [2018-11-28 10:35:07,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169908 states and 306090 transitions. [2018-11-28 10:35:08,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169908 to 113100. [2018-11-28 10:35:08,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 113100 states. [2018-11-28 10:35:08,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113100 states to 113100 states and 201773 transitions. [2018-11-28 10:35:08,442 INFO L728 BuchiCegarLoop]: Abstraction has 113100 states and 201773 transitions. [2018-11-28 10:35:08,442 INFO L608 BuchiCegarLoop]: Abstraction has 113100 states and 201773 transitions. [2018-11-28 10:35:08,442 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-28 10:35:08,442 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 113100 states and 201773 transitions. [2018-11-28 10:35:08,623 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 36062 [2018-11-28 10:35:08,623 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:35:08,624 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:35:08,625 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:08,625 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:08,625 INFO L794 eck$LassoCheckResult]: Stem: 3546809#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3546810#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 3541123#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 3541124#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 3543686#L1952 assume 0 != main_~tmp~21; 3543377#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 3543378#L2551 assume !(0 == getOrigin_~person); 3547808#L2555 assume !(1 == getOrigin_~person); 3547453#L2559 assume !(2 == getOrigin_~person); 3547454#L2563 assume !(3 == getOrigin_~person); 3548371#L2567 assume !(4 == getOrigin_~person); 3548298#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 3546841#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3543633#L2979 assume 0 == initPersonOnFloor_~floor; 3543567#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3541191#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3545133#L2771 assume !(0 == callOnFloor_~floorID); 3544853#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3544249#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3541765#L2708 assume !(0 == isFloorCalling_~floorID); 3540449#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3540450#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3548626#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3548623#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3543980#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3543981#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3548611#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3548635#L1134 assume !(0 != timeShift_~tmp___9~2); 3548627#L1225 assume !(1 == ~doorState~0); 3548616#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3548602#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3541770#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3547450#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3540800#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3540801#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3548007#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3548008#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3551333#L921 assume !(1 == ~currentHeading~0); 3551326#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3551319#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3551310#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3551309#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3548832#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3551307#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3551306#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 3546345#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3541694#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3541695#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3547620#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3548391#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3541669#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3540163#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 3543572#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 3542544#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3547373#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3543463#L1134-1 assume !(0 != timeShift_~tmp___9~2); 3543047#L1225-3 assume !(1 == ~doorState~0); 3542998#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3542999#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3548863#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3564295#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3564247#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3564196#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3564184#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3564145#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3564105#L921-3 assume !(1 == ~currentHeading~0); 3564099#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3544521#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3563688#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3565310#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3564648#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3565308#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3565304#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 3565302#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3564642#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3564641#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3564640#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3563587#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3541032#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3540783#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 3543574#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 3542574#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3569121#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3569119#L1134-2 assume !(0 != timeShift_~tmp___9~2); 3569117#L1225-6 assume !(1 == ~doorState~0); 3569116#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3569115#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3566312#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3569114#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3569052#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3569003#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3569001#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3568999#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3569000#L921-6 assume !(1 == ~currentHeading~0); 3570130#L931-18 assume !(0 == ~currentFloorID~0); 3544511#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3545753#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3568082#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3565969#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3568081#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3568062#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 3568058#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 3565928#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 3565922#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3565918#L2979-1 assume 0 == initPersonOnFloor_~floor; 3565919#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3575298#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3563611#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3563607#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3563601#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3563596#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3563597#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3558533#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3558534#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3558529#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3548320#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3578972#L1134-3 assume !(0 != timeShift_~tmp___9~2); 3578962#L1225-9 assume !(1 == ~doorState~0); 3578954#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3541456#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3541457#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3548415#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3540757#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3540758#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3543898#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3547972#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 3547974#L921-9 assume !(1 == ~currentHeading~0); 3545754#L931-27 assume !(0 == ~currentFloorID~0); 3544462#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3582976#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3601573#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3596552#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3601572#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3601571#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3601570#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 3601569#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 3600742#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 3600740#L2482-7 cleanup_~i~1 := 0; 3600737#L1757-2 assume !false; 3600738#L1758 [2018-11-28 10:35:08,625 INFO L796 eck$LassoCheckResult]: Loop: 3600738#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3636838#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 3636837#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 3636836#L1765 assume 1 != cleanup_~tmp___0~8; 3636835#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3636834#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3636833#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 3636832#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 3636831#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3636829#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 3636828#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3636827#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3619373#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3636826#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3636825#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3636824#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3636822#L985-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3636821#L2708-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3636816#L2735-110 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 3636812#L954-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 3636811#L966-8 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3636810#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 3636807#L1134-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3636808#L1136-8 assume !(0 != ~persons_0~0); 3637518#L1136-9 assume !(0 != ~persons_1~0); 3637471#L1150-4 assume !(0 != ~persons_2~0); 3637431#L1164-4 assume !(0 != ~persons_3~0); 3637429#L1178-4 assume !(0 != ~persons_4~0); 3637424#L1192-4 assume !(0 != ~persons_5~0); 3637407#L1206-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3637406#L2799-48 assume 0 == isPersonOnFloor_~floor; 3637389#L2800-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3637364#L2971-24 processWaitingOnFloor_#t~ret30 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret30;havoc processWaitingOnFloor_#t~ret30; 3637355#L1035-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 3637347#L1035-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3637344#L2799-50 assume 0 == isPersonOnFloor_~floor; 3637345#L2800-25 assume !(0 == isPersonOnFloor_~person); 3637334#L2804-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3637309#L2971-25 processWaitingOnFloor_#t~ret32 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret32;havoc processWaitingOnFloor_#t~ret32; 3637300#L1048-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 3637181#L1048-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3637180#L2799-52 assume 0 == isPersonOnFloor_~floor; 3637179#L2800-26 assume !(0 == isPersonOnFloor_~person); 3637178#L2804-26 assume !(1 == isPersonOnFloor_~person); 3637016#L2808-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3637008#L2971-26 processWaitingOnFloor_#t~ret34 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret34;havoc processWaitingOnFloor_#t~ret34; 3637006#L1061-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3636999#L1061-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3636996#L2799-54 assume 0 == isPersonOnFloor_~floor; 3636995#L2800-27 assume !(0 == isPersonOnFloor_~person); 3636994#L2804-27 assume !(1 == isPersonOnFloor_~person); 3636992#L2808-27 assume !(2 == isPersonOnFloor_~person); 3636980#L2812-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3636976#L2971-27 processWaitingOnFloor_#t~ret36 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret36;havoc processWaitingOnFloor_#t~ret36; 3636973#L1074-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3636971#L1074-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3636968#L2799-56 assume 0 == isPersonOnFloor_~floor; 3636966#L2800-28 assume !(0 == isPersonOnFloor_~person); 3636964#L2804-28 assume !(1 == isPersonOnFloor_~person); 3636962#L2808-28 assume !(2 == isPersonOnFloor_~person); 3636960#L2812-28 assume !(3 == isPersonOnFloor_~person); 3636942#L2816-28 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3636929#L2971-28 processWaitingOnFloor_#t~ret38 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret38;havoc processWaitingOnFloor_#t~ret38; 3636916#L1087-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3636911#L1087-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3636910#L2799-58 assume !(0 == isPersonOnFloor_~floor); 3636907#L2832-58 assume !(1 == isPersonOnFloor_~floor); 3636904#L2865-58 assume !(2 == isPersonOnFloor_~floor); 3636901#L2898-58 assume !(3 == isPersonOnFloor_~floor); 3636888#L2931-87 assume !(4 == isPersonOnFloor_~floor); 3636881#L2931-89 isPersonOnFloor_~retValue_acc~28 := 0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3636872#L2971-29 processWaitingOnFloor_#t~ret40 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret40;havoc processWaitingOnFloor_#t~ret40; 3636869#L1100-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3636868#L1100-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3636866#L2743-68 assume !(0 == resetCallOnFloor_~floorID); 3636864#L2746-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 3636861#L2755-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3636856#L283-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3636851#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3636850#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3619893#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3636849#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 3636848#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3636847#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 3636846#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 3636844#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 3636842#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 3636841#L1757-2 assume !false; 3600738#L1758 [2018-11-28 10:35:08,633 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:08,633 INFO L82 PathProgramCache]: Analyzing trace with hash -869240195, now seen corresponding path program 7 times [2018-11-28 10:35:08,633 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:08,633 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:08,634 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:08,634 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:08,634 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:08,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:08,834 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:08,834 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:08,835 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:35:08,835 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:35:08,835 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:08,835 INFO L82 PathProgramCache]: Analyzing trace with hash 183451674, now seen corresponding path program 1 times [2018-11-28 10:35:08,835 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:08,835 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:08,836 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:08,836 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:08,836 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:08,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:08,884 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:08,884 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:08,884 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-28 10:35:08,884 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:35:08,884 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-28 10:35:08,885 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-28 10:35:08,885 INFO L87 Difference]: Start difference. First operand 113100 states and 201773 transitions. cyclomatic complexity: 88703 Second operand 9 states. [2018-11-28 10:35:21,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:35:21,879 INFO L93 Difference]: Finished difference Result 527687 states and 949400 transitions. [2018-11-28 10:35:21,879 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2018-11-28 10:35:21,880 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 527687 states and 949400 transitions. [2018-11-28 10:35:23,105 INFO L131 ngComponentsAnalysis]: Automaton has 40 accepting balls. 145287 [2018-11-28 10:35:24,633 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 527687 states to 527651 states and 949364 transitions. [2018-11-28 10:35:24,633 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 397122 [2018-11-28 10:35:24,769 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 397122 [2018-11-28 10:35:24,769 INFO L73 IsDeterministic]: Start isDeterministic. Operand 527651 states and 949364 transitions. [2018-11-28 10:35:24,795 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:35:24,795 INFO L705 BuchiCegarLoop]: Abstraction has 527651 states and 949364 transitions. [2018-11-28 10:35:24,982 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 527651 states and 949364 transitions. [2018-11-28 10:35:26,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 527651 to 135906. [2018-11-28 10:35:26,781 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 135906 states. [2018-11-28 10:35:26,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135906 states to 135906 states and 242563 transitions. [2018-11-28 10:35:26,916 INFO L728 BuchiCegarLoop]: Abstraction has 135906 states and 242563 transitions. [2018-11-28 10:35:26,916 INFO L608 BuchiCegarLoop]: Abstraction has 135906 states and 242563 transitions. [2018-11-28 10:35:26,916 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-28 10:35:26,916 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 135906 states and 242563 transitions. [2018-11-28 10:35:27,123 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 43141 [2018-11-28 10:35:27,123 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:35:27,123 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:35:27,125 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:27,125 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:27,125 INFO L794 eck$LassoCheckResult]: Stem: 4187636#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4187637#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 4181979#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 4181980#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 4184508#L1952 assume 0 != main_~tmp~21; 4184163#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 4184164#L2551 assume !(0 == getOrigin_~person); 4188643#L2555 assume !(1 == getOrigin_~person); 4188285#L2559 assume !(2 == getOrigin_~person); 4188286#L2563 assume !(3 == getOrigin_~person); 4189290#L2567 assume !(4 == getOrigin_~person); 4189191#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 4187668#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4184452#L2979 assume 0 == initPersonOnFloor_~floor; 4184369#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4182042#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4185954#L2771 assume !(0 == callOnFloor_~floorID); 4185668#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4185088#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4186602#L2708 assume !(0 == isFloorCalling_~floorID); 4181315#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4181316#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4189584#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4189585#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4189564#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 4189565#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4191709#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 4191706#L1134 assume !(0 != timeShift_~tmp___9~2); 4191707#L1225 assume !(1 == ~doorState~0); 4192074#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4189571#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4189572#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4192105#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 4192103#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4184832#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4184833#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 4188836#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 4185695#L921 assume !(1 == ~currentHeading~0); 4185697#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4185603#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4192227#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4192313#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4192314#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4192310#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 4192311#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 4189267#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4189268#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4188456#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4188457#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4192393#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4192394#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4192433#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 4192434#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 4192406#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4192407#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 4192401#L1134-1 assume !(0 != timeShift_~tmp___9~2); 4192403#L1225-3 assume !(1 == ~doorState~0); 4192348#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4192349#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4189755#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4192342#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 4192329#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4192330#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4205597#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 4213355#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 4213356#L921-3 assume !(1 == ~currentHeading~0); 4247321#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4185362#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4186225#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4186226#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4195132#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4205340#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 4205302#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 4187184#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4181955#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4181956#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4189348#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4189302#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4189303#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4245223#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 4245215#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 4245140#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4245134#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 4245131#L1134-2 assume !(0 != timeShift_~tmp___9~2); 4245132#L1225-6 assume !(1 == ~doorState~0); 4249386#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4249385#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4208165#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4249380#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 4249376#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4249377#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4250729#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 4250726#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 4250722#L921-6 assume !(1 == ~currentHeading~0); 4250721#L931-18 assume !(0 == ~currentFloorID~0); 4185352#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4186200#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4186201#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4220789#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4189332#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 4189232#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 4187125#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 4188955#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 4187666#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4184458#L2979-1 assume 0 == initPersonOnFloor_~floor; 4184371#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4182049#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4238865#L2771-2 assume !(0 == callOnFloor_~floorID); 4185646#L2774-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4185100#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4182344#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4182345#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4189333#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4189334#L981-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4219139#L2708-80 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4183865#L2735-80 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 4189475#L954-7 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 4188917#L966-7 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4188193#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 4188194#L1134-3 assume !(0 != timeShift_~tmp___9~2); 4183819#L1225-9 assume !(1 == ~doorState~0); 4183820#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4182298#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4182299#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4189335#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 4181625#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4181626#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4257968#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 4257969#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 4258224#L921-9 assume !(1 == ~currentHeading~0); 4258223#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4185304#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4186430#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4186431#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4189544#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4189545#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 4189251#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 4187129#L2482-7 cleanup_~i~1 := 0; 4258213#L1757-2 assume !false; 4258214#L1758 [2018-11-28 10:35:27,125 INFO L796 eck$LassoCheckResult]: Loop: 4258214#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 4309397#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 4309396#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 4309395#L1765 assume 1 != cleanup_~tmp___0~8; 4309394#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4309393#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4309392#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 4309391#L420 assume !(0 != anyStopRequested_~tmp___3~0); 4309387#L424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 4309377#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 4309376#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 4309371#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4309370#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4266955#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4309369#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4309368#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4309366#L2708-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4309360#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 4309357#L954-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 4309355#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4307398#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 4307395#L1134-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 4307396#L1136-8 assume !(0 != ~persons_0~0); 4310169#L1136-9 assume !(0 != ~persons_1~0); 4310136#L1150-4 assume !(0 != ~persons_2~0); 4310089#L1164-4 assume !(0 != ~persons_3~0); 4310074#L1178-4 assume !(0 != ~persons_4~0); 4310059#L1192-4 assume !(0 != ~persons_5~0); 4309736#L1206-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 4309733#L2799-48 assume 0 == isPersonOnFloor_~floor; 4309718#L2800-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 4309693#L2971-24 processWaitingOnFloor_#t~ret30 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret30;havoc processWaitingOnFloor_#t~ret30; 4309691#L1035-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 4309689#L1035-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 4309686#L2799-50 assume 0 == isPersonOnFloor_~floor; 4309687#L2800-25 assume !(0 == isPersonOnFloor_~person); 4309676#L2804-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 4309646#L2971-25 processWaitingOnFloor_#t~ret32 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret32;havoc processWaitingOnFloor_#t~ret32; 4309644#L1048-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 4309626#L1048-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 4309623#L2799-52 assume 0 == isPersonOnFloor_~floor; 4309618#L2800-26 assume !(0 == isPersonOnFloor_~person); 4309612#L2804-26 assume !(1 == isPersonOnFloor_~person); 4309606#L2808-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 4309596#L2971-26 processWaitingOnFloor_#t~ret34 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret34;havoc processWaitingOnFloor_#t~ret34; 4309594#L1061-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 4309579#L1061-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 4309578#L2799-54 assume 0 == isPersonOnFloor_~floor; 4309575#L2800-27 assume !(0 == isPersonOnFloor_~person); 4309569#L2804-27 assume !(1 == isPersonOnFloor_~person); 4309562#L2808-27 assume !(2 == isPersonOnFloor_~person); 4309555#L2812-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 4309539#L2971-27 processWaitingOnFloor_#t~ret36 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret36;havoc processWaitingOnFloor_#t~ret36; 4309524#L1074-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 4309521#L1074-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 4309520#L2799-56 assume 0 == isPersonOnFloor_~floor; 4309517#L2800-28 assume !(0 == isPersonOnFloor_~person); 4309511#L2804-28 assume !(1 == isPersonOnFloor_~person); 4309504#L2808-28 assume !(2 == isPersonOnFloor_~person); 4309497#L2812-28 assume !(3 == isPersonOnFloor_~person); 4309491#L2816-28 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 4309489#L2971-28 processWaitingOnFloor_#t~ret38 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret38;havoc processWaitingOnFloor_#t~ret38; 4309475#L1087-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 4309472#L1087-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 4309471#L2799-58 assume !(0 == isPersonOnFloor_~floor); 4309465#L2832-58 assume !(1 == isPersonOnFloor_~floor); 4309458#L2865-58 assume !(2 == isPersonOnFloor_~floor); 4309451#L2898-58 assume !(3 == isPersonOnFloor_~floor); 4309444#L2931-87 assume !(4 == isPersonOnFloor_~floor); 4309438#L2931-89 isPersonOnFloor_~retValue_acc~28 := 0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 4309429#L2971-29 processWaitingOnFloor_#t~ret40 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret40;havoc processWaitingOnFloor_#t~ret40; 4309426#L1100-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 4309425#L1100-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 4309422#L2743-68 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 4309419#L2755-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 4309412#L283-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 4309407#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4309406#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4267350#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4309405#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 4309400#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 4309398#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 4306461#L1757-2 assume !false; 4258214#L1758 [2018-11-28 10:35:27,131 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:27,131 INFO L82 PathProgramCache]: Analyzing trace with hash 1596088164, now seen corresponding path program 1 times [2018-11-28 10:35:27,133 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:27,133 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:27,133 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:27,133 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:27,133 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:27,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:27,193 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:27,193 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:27,193 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:35:27,193 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:35:27,193 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:27,193 INFO L82 PathProgramCache]: Analyzing trace with hash -1059597490, now seen corresponding path program 1 times [2018-11-28 10:35:27,194 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:27,194 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:27,194 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:27,194 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:27,194 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:27,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:27,224 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:27,224 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:27,225 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 10:35:27,225 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:35:27,225 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 10:35:27,225 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 10:35:27,225 INFO L87 Difference]: Start difference. First operand 135906 states and 242563 transitions. cyclomatic complexity: 106703 Second operand 7 states. [2018-11-28 10:35:33,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:35:33,883 INFO L93 Difference]: Finished difference Result 662986 states and 1176910 transitions. [2018-11-28 10:35:33,883 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-11-28 10:35:33,883 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 662986 states and 1176910 transitions. [2018-11-28 10:35:35,461 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 207363 [2018-11-28 10:35:42,083 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 662986 states to 662986 states and 1176910 transitions. [2018-11-28 10:35:42,083 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 460030 [2018-11-28 10:35:42,257 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 460030 [2018-11-28 10:35:42,258 INFO L73 IsDeterministic]: Start isDeterministic. Operand 662986 states and 1176910 transitions. [2018-11-28 10:35:42,293 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:35:42,293 INFO L705 BuchiCegarLoop]: Abstraction has 662986 states and 1176910 transitions. [2018-11-28 10:35:42,537 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 662986 states and 1176910 transitions. [2018-11-28 10:35:44,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 662986 to 136140. [2018-11-28 10:35:44,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 136140 states. [2018-11-28 10:35:44,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136140 states to 136140 states and 242783 transitions. [2018-11-28 10:35:44,861 INFO L728 BuchiCegarLoop]: Abstraction has 136140 states and 242783 transitions. [2018-11-28 10:35:44,861 INFO L608 BuchiCegarLoop]: Abstraction has 136140 states and 242783 transitions. [2018-11-28 10:35:44,861 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-11-28 10:35:44,861 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 136140 states and 242783 transitions. [2018-11-28 10:35:45,047 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 43219 [2018-11-28 10:35:45,048 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:35:45,048 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:35:45,049 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:45,049 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:45,049 INFO L794 eck$LassoCheckResult]: Stem: 4986369#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4986370#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 4980930#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 4980931#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 4983401#L1952 assume 0 != main_~tmp~21; 4983075#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 4983076#L2551 assume !(0 == getOrigin_~person); 4987248#L2555 assume !(1 == getOrigin_~person); 4986931#L2559 assume !(2 == getOrigin_~person); 4986932#L2563 assume !(3 == getOrigin_~person); 4987791#L2567 assume !(4 == getOrigin_~person); 4987707#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 4986402#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4983336#L2979 assume 0 == initPersonOnFloor_~floor; 4983266#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4980994#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4984779#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4984780#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4985408#L2708 assume !(0 == isFloorCalling_~floorID); 4980261#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4980262#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4988049#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4988050#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4983702#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 4983703#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4986880#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 4983159#L1134 assume !(0 != timeShift_~tmp___9~2); 4982750#L1225 assume !(1 == ~doorState~0); 4982751#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4988058#L2708-3 assume !(0 == isFloorCalling_~floorID); 4988059#L2712-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4993644#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4987862#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 4980613#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4980614#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4983711#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 4987433#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 4984536#L921 assume !(1 == ~currentHeading~0); 4984538#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4984443#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4992703#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4992704#L2708-25 assume !(0 == isFloorCalling_~floorID); 5000631#L2712-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5000630#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5000589#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5000461#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5000462#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4992718#L2708-26 assume !(0 == isFloorCalling_~floorID); 4980007#L2712-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4980009#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4992955#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4992956#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4983631#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 4983632#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4987506#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 5006138#L1134-1 assume !(0 != timeShift_~tmp___9~2); 5006139#L1225-3 assume !(1 == ~doorState~0); 5009111#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5008844#L2708-29 assume !(0 == isFloorCalling_~floorID); 5008846#L2712-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5010047#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5010046#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5010045#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4983644#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4983645#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5010548#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5010550#L921-3 assume !(1 == ~currentHeading~0); 5011943#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4984210#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4985049#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4985050#L2708-51 assume !(0 == isFloorCalling_~floorID); 4980661#L2712-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4980662#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5010979#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 4987771#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 4985936#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4987770#L2708-52 assume !(0 == isFloorCalling_~floorID); 4980586#L2712-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4980587#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4987855#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4987856#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4983675#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 4983676#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5010970#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 5010969#L1134-2 assume !(0 != timeShift_~tmp___9~2); 5008858#L1225-6 assume !(1 == ~doorState~0); 5008859#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5008833#L2708-55 assume !(0 == isFloorCalling_~floorID); 5008835#L2712-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5008823#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5008824#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5008815#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5008816#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5011176#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5011165#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5011157#L921-6 assume !(1 == ~currentHeading~0); 5011056#L931-18 assume !(0 == ~currentFloorID~0); 5010867#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5010860#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4992729#L2708-77 assume !(0 == isFloorCalling_~floorID); 4992731#L2712-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5019183#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5019182#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5019177#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5019175#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 5019173#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 5019168#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5019167#L2979-1 assume 0 == initPersonOnFloor_~floor; 4993008#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4992995#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4992991#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4992930#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4992739#L2708-78 assume !(0 == isFloorCalling_~floorID); 4980406#L2712-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4980408#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4993031#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4993032#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4983610#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 4983611#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4986877#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 4983177#L1134-3 assume !(0 != timeShift_~tmp___9~2); 4983179#L1225-9 assume !(1 == ~doorState~0); 5021678#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4992713#L2708-81 assume !(0 == isFloorCalling_~floorID); 4992715#L2712-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5028217#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5028216#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5028215#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5021627#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5021624#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5021621#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5021622#L921-9 assume !(1 == ~currentHeading~0); 5024321#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4984152#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5028105#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5028103#L2708-103 assume !(0 == isFloorCalling_~floorID); 5028102#L2712-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5028098#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5028096#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5028092#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5028090#L2482-7 cleanup_~i~1 := 0; 5028088#L1757-2 assume !false; 5028089#L1758 [2018-11-28 10:35:45,049 INFO L796 eck$LassoCheckResult]: Loop: 5028089#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 5053979#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 5053977#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 5053975#L1765 assume 1 != cleanup_~tmp___0~8; 5053951#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5053949#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5053948#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 5053937#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 5053887#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 5053885#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 5053857#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5053824#L2708-109 assume !(0 == isFloorCalling_~floorID); 5053826#L2712-109 assume !(1 == isFloorCalling_~floorID); 5053820#L2716-109 assume !(2 == isFloorCalling_~floorID); 5053821#L2720-109 assume !(3 == isFloorCalling_~floorID); 5053816#L2724-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5053817#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5053875#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5053874#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5053871#L2708-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5053867#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 5053865#L954-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 5053829#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5053806#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 5053803#L1134-4 assume !(0 != timeShift_~tmp___9~2); 5053800#L1225-12 assume !(1 == ~doorState~0); 5053798#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5053796#L2708-112 assume !(0 == isFloorCalling_~floorID); 5053793#L2712-112 assume !(1 == isFloorCalling_~floorID); 5053785#L2716-112 assume !(2 == isFloorCalling_~floorID); 5053786#L2720-112 assume !(3 == isFloorCalling_~floorID); 5053789#L2724-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5053790#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5059812#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5059810#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5059811#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5059940#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5059937#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5059816#L921-12 assume !(1 == ~currentHeading~0); 5059763#L931-36 assume !(0 == ~currentFloorID~0); 5054853#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5054000#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5053998#L2708-134 assume !(0 == isFloorCalling_~floorID); 5053997#L2712-134 assume !(1 == isFloorCalling_~floorID); 5053996#L2716-134 assume !(2 == isFloorCalling_~floorID); 5053995#L2720-134 assume !(3 == isFloorCalling_~floorID); 5053993#L2724-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5053992#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5053990#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5053986#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5053984#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 5053982#L1757-2 assume !false; 5028089#L1758 [2018-11-28 10:35:45,054 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:45,054 INFO L82 PathProgramCache]: Analyzing trace with hash -362685206, now seen corresponding path program 1 times [2018-11-28 10:35:45,054 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:45,054 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:45,054 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:45,055 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:45,055 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:45,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:45,135 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:45,135 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:45,135 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:35:45,135 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:35:45,135 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:45,136 INFO L82 PathProgramCache]: Analyzing trace with hash 438211206, now seen corresponding path program 1 times [2018-11-28 10:35:45,136 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:45,136 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:45,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:45,136 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:45,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:45,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:45,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:45,175 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:45,175 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 10:35:45,176 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:35:45,176 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 10:35:45,176 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 10:35:45,176 INFO L87 Difference]: Start difference. First operand 136140 states and 242783 transitions. cyclomatic complexity: 106689 Second operand 7 states. [2018-11-28 10:35:46,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:35:46,160 INFO L93 Difference]: Finished difference Result 302459 states and 537707 transitions. [2018-11-28 10:35:46,160 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-11-28 10:35:46,161 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 302459 states and 537707 transitions. [2018-11-28 10:35:46,888 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 94530 [2018-11-28 10:35:48,071 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 302459 states to 302459 states and 537707 transitions. [2018-11-28 10:35:48,072 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 227258 [2018-11-28 10:35:48,150 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 227258 [2018-11-28 10:35:48,150 INFO L73 IsDeterministic]: Start isDeterministic. Operand 302459 states and 537707 transitions. [2018-11-28 10:35:48,151 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:35:48,151 INFO L705 BuchiCegarLoop]: Abstraction has 302459 states and 537707 transitions. [2018-11-28 10:35:48,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302459 states and 537707 transitions. [2018-11-28 10:35:49,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302459 to 136498. [2018-11-28 10:35:49,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 136498 states. [2018-11-28 10:35:49,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136498 states to 136498 states and 243141 transitions. [2018-11-28 10:35:49,510 INFO L728 BuchiCegarLoop]: Abstraction has 136498 states and 243141 transitions. [2018-11-28 10:35:49,510 INFO L608 BuchiCegarLoop]: Abstraction has 136498 states and 243141 transitions. [2018-11-28 10:35:49,510 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-11-28 10:35:49,510 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 136498 states and 243141 transitions. [2018-11-28 10:35:49,720 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 43342 [2018-11-28 10:35:49,720 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:35:49,720 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:35:49,721 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:49,721 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:35:49,722 INFO L794 eck$LassoCheckResult]: Stem: 5425040#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5425041#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 5419576#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 5419577#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 5422073#L1952 assume 0 != main_~tmp~21; 5421746#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 5421747#L2551 assume !(0 == getOrigin_~person); 5425982#L2555 assume !(1 == getOrigin_~person); 5425640#L2559 assume !(2 == getOrigin_~person); 5425641#L2563 assume !(3 == getOrigin_~person); 5426563#L2567 assume !(4 == getOrigin_~person); 5426484#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 5425072#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5422016#L2979 assume 0 == initPersonOnFloor_~floor; 5421934#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5419641#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5423453#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5423454#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5420186#L2708 assume !(0 == isFloorCalling_~floorID); 5420188#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5426829#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5426830#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5426819#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5426820#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 5426812#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5426814#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 5426934#L1134 assume !(0 != timeShift_~tmp___9~2); 5426918#L1225 assume !(1 == ~doorState~0); 5426919#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5426905#L2708-3 assume !(0 == isFloorCalling_~floorID); 5426906#L2712-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5427145#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5427144#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5426832#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5426833#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5426822#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5426823#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5427089#L921 assume !(1 == ~currentHeading~0); 5427083#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5427077#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5427075#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5427069#L2708-25 assume !(0 == isFloorCalling_~floorID); 5427070#L2712-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5427062#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5427063#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5427053#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5427054#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5427371#L2708-26 assume !(0 == isFloorCalling_~floorID); 5427372#L2712-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5429896#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5429897#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5427050#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5427052#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 5427031#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5427027#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 5427020#L1134-1 assume !(0 != timeShift_~tmp___9~2); 5427022#L1225-3 assume !(1 == ~doorState~0); 5427011#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5427012#L2708-29 assume !(0 == isFloorCalling_~floorID); 5427499#L2712-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5427497#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5427492#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5427493#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5434907#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5434908#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5434858#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5434859#L921-3 assume !(1 == ~currentHeading~0); 5443162#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5441590#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5441581#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5441277#L2708-51 assume !(0 == isFloorCalling_~floorID); 5441278#L2712-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5441280#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5441281#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5441084#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5434818#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5434819#L2708-52 assume !(0 == isFloorCalling_~floorID); 5435197#L2712-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5444809#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5444807#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5444799#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5444791#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 5444768#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5444766#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 5444764#L1134-2 assume !(0 != timeShift_~tmp___9~2); 5444763#L1225-6 assume !(1 == ~doorState~0); 5444762#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5444760#L2708-55 assume !(0 == isFloorCalling_~floorID); 5444759#L2712-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5444659#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5444216#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5444214#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5443949#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5443946#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5443942#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5443701#L921-6 assume !(1 == ~currentHeading~0); 5443675#L931-18 assume !(0 == ~currentFloorID~0); 5443664#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5443656#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5458828#L2708-77 assume !(0 == isFloorCalling_~floorID); 5458824#L2712-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5458823#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5458822#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5458817#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5458815#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 5458813#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 5458808#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5458807#L2979-1 assume 0 == initPersonOnFloor_~floor; 5458789#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5458775#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5458774#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5441302#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5458769#L2708-78 assume !(0 == isFloorCalling_~floorID); 5458768#L2712-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5458764#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5458763#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5458762#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5458761#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 5458219#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5458217#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 5458215#L1134-3 assume !(0 != timeShift_~tmp___9~2); 5458159#L1225-9 assume !(1 == ~doorState~0); 5458156#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5458157#L2708-81 assume !(0 == isFloorCalling_~floorID); 5434831#L2712-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5434825#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5434817#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5434077#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5434078#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5482834#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5482832#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5482814#L921-9 assume !(1 == ~currentHeading~0); 5482810#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5482798#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5482793#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5486284#L2708-103 assume !(0 == isFloorCalling_~floorID); 5486283#L2712-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5486279#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5486277#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5486273#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5486270#L2482-7 cleanup_~i~1 := 0; 5486267#L1757-2 assume !false; 5486268#L1758 [2018-11-28 10:35:49,722 INFO L796 eck$LassoCheckResult]: Loop: 5486268#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 5506492#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 5498586#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 5498584#L1765 assume 1 != cleanup_~tmp___0~8; 5498554#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5498551#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5498544#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 5496179#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 5496170#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 5496165#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 5493330#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5493324#L2708-109 assume !(0 == isFloorCalling_~floorID); 5493322#L2712-109 assume !(1 == isFloorCalling_~floorID); 5493321#L2716-109 assume !(2 == isFloorCalling_~floorID); 5493319#L2720-109 assume !(3 == isFloorCalling_~floorID); 5493317#L2724-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5493151#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5493150#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5493118#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5493115#L2708-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5493110#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 5493111#L954-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 5493107#L329-9 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 5493101#L350-9 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25; 5493089#L961-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 5493086#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5493081#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 5493077#L1134-4 assume !(0 != timeShift_~tmp___9~2); 5493073#L1225-12 assume !(1 == ~doorState~0); 5493071#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5493069#L2708-112 assume !(0 == isFloorCalling_~floorID); 5493054#L2712-112 assume !(1 == isFloorCalling_~floorID); 5493049#L2716-112 assume !(2 == isFloorCalling_~floorID); 5493042#L2720-112 assume !(3 == isFloorCalling_~floorID); 5492801#L2724-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5492802#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5493691#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 5493689#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5493690#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5493745#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5493743#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5493744#L921-12 assume !(1 == ~currentHeading~0); 5498007#L931-36 assume !(0 == ~currentFloorID~0); 5497169#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5497162#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5497161#L2708-134 assume !(0 == isFloorCalling_~floorID); 5496323#L2712-134 assume !(1 == isFloorCalling_~floorID); 5496319#L2716-134 assume !(2 == isFloorCalling_~floorID); 5496320#L2720-134 assume !(3 == isFloorCalling_~floorID); 5496321#L2724-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5496322#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5510372#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 5510367#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5510365#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 5510334#L1757-2 assume !false; 5486268#L1758 [2018-11-28 10:35:49,726 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:49,726 INFO L82 PathProgramCache]: Analyzing trace with hash -362685206, now seen corresponding path program 2 times [2018-11-28 10:35:49,726 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:49,727 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:49,727 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:49,727 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:35:49,727 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:49,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:49,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:49,792 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:49,792 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:35:49,792 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:35:49,793 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:35:49,793 INFO L82 PathProgramCache]: Analyzing trace with hash 445721044, now seen corresponding path program 1 times [2018-11-28 10:35:49,793 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:35:49,793 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:35:49,793 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:49,793 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:35:49,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:35:49,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:35:49,823 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:35:49,823 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:35:49,823 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 10:35:49,823 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:35:49,823 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 10:35:49,824 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 10:35:49,824 INFO L87 Difference]: Start difference. First operand 136498 states and 243141 transitions. cyclomatic complexity: 106689 Second operand 7 states. [2018-11-28 10:35:54,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:35:54,270 INFO L93 Difference]: Finished difference Result 553740 states and 982999 transitions. [2018-11-28 10:35:54,271 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-11-28 10:35:54,271 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 553740 states and 982999 transitions. [2018-11-28 10:35:55,952 INFO L131 ngComponentsAnalysis]: Automaton has 37 accepting balls. 173419 [2018-11-28 10:35:56,964 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 553740 states to 553740 states and 982999 transitions. [2018-11-28 10:35:56,965 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 384642 [2018-11-28 10:35:57,122 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 384642 [2018-11-28 10:35:57,122 INFO L73 IsDeterministic]: Start isDeterministic. Operand 553740 states and 982999 transitions. [2018-11-28 10:35:57,149 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:35:57,149 INFO L705 BuchiCegarLoop]: Abstraction has 553740 states and 982999 transitions. [2018-11-28 10:35:57,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 553740 states and 982999 transitions. [2018-11-28 10:35:59,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 553740 to 135730. [2018-11-28 10:35:59,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 135730 states. [2018-11-28 10:35:59,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135730 states to 135730 states and 241804 transitions. [2018-11-28 10:35:59,839 INFO L728 BuchiCegarLoop]: Abstraction has 135730 states and 241804 transitions. [2018-11-28 10:35:59,839 INFO L608 BuchiCegarLoop]: Abstraction has 135730 states and 241804 transitions. [2018-11-28 10:35:59,839 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-11-28 10:35:59,839 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 135730 states and 241804 transitions. [2018-11-28 10:36:00,051 INFO L131 ngComponentsAnalysis]: Automaton has 34 accepting balls. 42891 [2018-11-28 10:36:00,051 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:36:00,051 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:36:00,052 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:00,052 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:00,052 INFO L794 eck$LassoCheckResult]: Stem: 6115326#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 6115327#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 6109861#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 6109862#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 6112360#L1952 assume 0 != main_~tmp~21; 6112035#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 6112036#L2551 assume !(0 == getOrigin_~person); 6116245#L2555 assume !(1 == getOrigin_~person); 6115905#L2559 assume !(2 == getOrigin_~person); 6115906#L2563 assume !(3 == getOrigin_~person); 6116795#L2567 assume !(4 == getOrigin_~person); 6116704#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 6115358#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6112301#L2979 assume 0 == initPersonOnFloor_~floor; 6112225#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6109924#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6113744#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6113745#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6110472#L2708 assume !(0 == isFloorCalling_~floorID); 6110474#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6117064#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6117065#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6117060#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6117061#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 6117034#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6117036#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6117074#L1134 assume !(0 != timeShift_~tmp___9~2); 6117075#L1225 assume !(1 == ~doorState~0); 6111713#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6111714#L2708-3 assume !(0 == isFloorCalling_~floorID); 6109229#L2712-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6109230#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6117105#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6117106#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6112666#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6112667#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6116427#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6116428#L921 assume !(1 == ~currentHeading~0); 6119563#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6119556#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6119554#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6118706#L2708-25 assume !(0 == isFloorCalling_~floorID); 6118707#L2712-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6118685#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6118686#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6118656#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6118657#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6118642#L2708-26 assume !(0 == isFloorCalling_~floorID); 6118644#L2712-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6119685#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6119686#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6119501#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6119503#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 6119492#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6119494#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6126227#L1134-1 assume !(0 != timeShift_~tmp___9~2); 6126228#L1225-3 assume !(1 == ~doorState~0); 6126446#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6126445#L2708-29 assume !(0 == isFloorCalling_~floorID); 6126443#L2712-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6126440#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6126439#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6126437#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6126435#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6126419#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6126412#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6126407#L921-3 assume !(1 == ~currentHeading~0); 6126404#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6125499#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6123566#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6120043#L2708-51 assume !(0 == isFloorCalling_~floorID); 6120045#L2712-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6123561#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6123559#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6123555#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6123553#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6123552#L2708-52 assume !(0 == isFloorCalling_~floorID); 6123549#L2712-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6123546#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6123544#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6123530#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6123525#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 6123504#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6123502#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6123500#L1134-2 assume !(0 != timeShift_~tmp___9~2); 6123499#L1225-6 assume !(1 == ~doorState~0); 6123498#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6123496#L2708-55 assume !(0 == isFloorCalling_~floorID); 6123495#L2712-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6123491#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6123490#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6123488#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6123489#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6125128#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6124651#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6123606#L921-6 assume !(1 == ~currentHeading~0); 6123465#L931-18 assume !(0 == ~currentFloorID~0); 6123453#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6123417#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6123415#L2708-77 assume !(0 == isFloorCalling_~floorID); 6123411#L2712-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6123410#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6123409#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6123404#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6123402#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 6123400#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 6123395#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6123393#L2979-1 assume 0 == initPersonOnFloor_~floor; 6123394#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6123313#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6123314#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6123294#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6123295#L2708-78 assume !(0 == isFloorCalling_~floorID); 6146546#L2712-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6134323#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6134324#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6134317#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6134318#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 6132075#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6132076#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6158022#L1134-3 assume !(0 != timeShift_~tmp___9~2); 6158021#L1225-9 assume !(1 == ~doorState~0); 6158020#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6150666#L2708-81 assume !(0 == isFloorCalling_~floorID); 6150668#L2712-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6150659#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6150660#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6150654#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6150655#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6158114#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6158112#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6158113#L921-9 assume !(1 == ~currentHeading~0); 6150598#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6113123#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6137032#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6137033#L2708-103 assume !(0 == isFloorCalling_~floorID); 6164845#L2712-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6164841#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6164839#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6164835#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6164833#L2482-7 cleanup_~i~1 := 0; 6164831#L1757-2 assume !false; 6164832#L1758 [2018-11-28 10:36:00,053 INFO L796 eck$LassoCheckResult]: Loop: 6164832#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 6180084#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 6180080#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 6180081#L1765 assume 1 != cleanup_~tmp___0~8; 6186051#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6180045#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6180046#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 6180030#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 6180025#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 6180021#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 6178861#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6178859#L2708-109 assume !(0 == isFloorCalling_~floorID); 6177662#L2712-109 assume !(1 == isFloorCalling_~floorID); 6177663#L2716-109 assume !(2 == isFloorCalling_~floorID); 6177664#L2720-109 assume !(3 == isFloorCalling_~floorID); 6177660#L2724-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6177661#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6178934#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6178919#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6178920#L2708-111 assume !(0 == isFloorCalling_~floorID); 6178916#L2712-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6178540#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 6178541#L954-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 6177655#L329-9 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 6177652#L350-9 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25; 6177635#L961-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 6177637#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6185919#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6185917#L1134-4 assume !(0 != timeShift_~tmp___9~2); 6185916#L1225-12 assume !(1 == ~doorState~0); 6185915#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6185914#L2708-112 assume !(0 == isFloorCalling_~floorID); 6185913#L2712-112 assume !(1 == isFloorCalling_~floorID); 6185912#L2716-112 assume !(2 == isFloorCalling_~floorID); 6185911#L2720-112 assume !(3 == isFloorCalling_~floorID); 6185909#L2724-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6185908#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6185907#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6185905#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6185906#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6188475#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6188473#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6188474#L921-12 assume !(1 == ~currentHeading~0); 6190657#L931-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6190655#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6180114#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6180115#L2708-134 assume !(0 == isFloorCalling_~floorID); 6180109#L2712-134 assume !(1 == isFloorCalling_~floorID); 6180110#L2716-134 assume !(2 == isFloorCalling_~floorID); 6180106#L2720-134 assume !(3 == isFloorCalling_~floorID); 6180107#L2724-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6180100#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6180101#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6180090#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6180089#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 6180085#L1757-2 assume !false; 6164832#L1758 [2018-11-28 10:36:00,056 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:00,057 INFO L82 PathProgramCache]: Analyzing trace with hash -362685206, now seen corresponding path program 3 times [2018-11-28 10:36:00,057 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:00,057 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:00,057 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:00,057 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:36:00,057 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:00,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:00,108 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:00,108 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:00,108 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:36:00,109 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:36:00,109 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:00,109 INFO L82 PathProgramCache]: Analyzing trace with hash 808800478, now seen corresponding path program 1 times [2018-11-28 10:36:00,109 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:00,109 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:00,109 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:00,109 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:36:00,109 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:00,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:00,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:00,144 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:00,144 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 10:36:00,145 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:36:00,145 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 10:36:00,145 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 10:36:00,145 INFO L87 Difference]: Start difference. First operand 135730 states and 241804 transitions. cyclomatic complexity: 106127 Second operand 7 states. [2018-11-28 10:36:07,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:36:07,409 INFO L93 Difference]: Finished difference Result 589144 states and 1045397 transitions. [2018-11-28 10:36:07,409 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-11-28 10:36:07,409 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 589144 states and 1045397 transitions. [2018-11-28 10:36:09,054 INFO L131 ngComponentsAnalysis]: Automaton has 86 accepting balls. 183012 [2018-11-28 10:36:10,125 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 589144 states to 588100 states and 1043965 transitions. [2018-11-28 10:36:10,125 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 444023 [2018-11-28 10:36:10,315 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 444023 [2018-11-28 10:36:10,316 INFO L73 IsDeterministic]: Start isDeterministic. Operand 588100 states and 1043965 transitions. [2018-11-28 10:36:10,341 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:36:10,341 INFO L705 BuchiCegarLoop]: Abstraction has 588100 states and 1043965 transitions. [2018-11-28 10:36:10,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 588100 states and 1043965 transitions. [2018-11-28 10:36:13,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 588100 to 206562. [2018-11-28 10:36:13,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 206562 states. [2018-11-28 10:36:13,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206562 states to 206562 states and 366545 transitions. [2018-11-28 10:36:13,300 INFO L728 BuchiCegarLoop]: Abstraction has 206562 states and 366545 transitions. [2018-11-28 10:36:13,300 INFO L608 BuchiCegarLoop]: Abstraction has 206562 states and 366545 transitions. [2018-11-28 10:36:13,300 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-11-28 10:36:13,300 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 206562 states and 366545 transitions. [2018-11-28 10:36:13,629 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 67433 [2018-11-28 10:36:13,630 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:36:13,630 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:36:13,631 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:13,631 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:13,631 INFO L794 eck$LassoCheckResult]: Stem: 6840109#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 6840110#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 6834788#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 6834789#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 6837244#L1952 assume 0 != main_~tmp~21; 6836925#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 6836926#L2551 assume !(0 == getOrigin_~person); 6840976#L2555 assume !(1 == getOrigin_~person); 6840663#L2559 assume !(2 == getOrigin_~person); 6840664#L2563 assume !(3 == getOrigin_~person); 6841484#L2567 assume !(4 == getOrigin_~person); 6841418#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 6840141#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6837190#L2979 assume 0 == initPersonOnFloor_~floor; 6837111#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6834853#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6838567#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6838568#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6839188#L2708 assume !(0 == isFloorCalling_~floorID); 6841708#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6841726#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6841535#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6841536#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6837516#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 6837517#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6841723#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6845029#L1134 assume !(0 != timeShift_~tmp___9~2); 6845028#L1225 assume !(1 == ~doorState~0); 6845027#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6845024#L2708-3 assume !(0 == isFloorCalling_~floorID); 6845017#L2712-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6844994#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6844985#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6844964#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6844962#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6844961#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6844959#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6844960#L921 assume !(1 == ~currentHeading~0); 6845179#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6844882#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6844879#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6844877#L2708-25 assume !(0 == isFloorCalling_~floorID); 6844874#L2712-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6844872#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6844870#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6844865#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6844864#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6844862#L2708-26 assume !(0 == isFloorCalling_~floorID); 6844861#L2712-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6844856#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6844855#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6844854#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6844853#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 6844851#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6844852#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6858018#L1134-1 assume !(0 != timeShift_~tmp___9~2); 6858019#L1225-3 assume !(1 == ~doorState~0); 6858010#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6858011#L2708-29 assume !(0 == isFloorCalling_~floorID); 6858005#L2712-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6858002#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6857999#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6858000#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6859697#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6859696#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6859693#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6859695#L921-3 assume !(1 == ~currentHeading~0); 6860784#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6860746#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6859001#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6858999#L2708-51 assume !(0 == isFloorCalling_~floorID); 6858997#L2712-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6858994#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6858992#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6858988#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6858986#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6858984#L2708-52 assume !(0 == isFloorCalling_~floorID); 6858985#L2712-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6864189#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6862408#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6862409#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6858973#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 6858974#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6864167#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6864163#L1134-2 assume !(0 != timeShift_~tmp___9~2); 6864165#L1225-6 assume !(1 == ~doorState~0); 6865943#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6865936#L2708-55 assume !(0 == isFloorCalling_~floorID); 6865770#L2712-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6865762#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6865420#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6865416#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6865291#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6865289#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6865201#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6865176#L921-6 assume !(1 == ~currentHeading~0); 6865165#L931-18 assume !(0 == ~currentFloorID~0); 6865154#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6865034#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6865031#L2708-77 assume !(0 == isFloorCalling_~floorID); 6865033#L2712-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6865024#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6865025#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6865017#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6865019#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 6865012#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 6865008#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6879056#L2979-1 assume 0 == initPersonOnFloor_~floor; 6864983#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6864970#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6864966#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6863333#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6878763#L2708-78 assume !(0 == isFloorCalling_~floorID); 6878765#L2712-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6879060#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6879061#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6879010#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6879012#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 6878742#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6878743#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6909149#L1134-3 assume !(0 != timeShift_~tmp___9~2); 6909148#L1225-9 assume !(1 == ~doorState~0); 6909147#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6909145#L2708-81 assume !(0 == isFloorCalling_~floorID); 6909143#L2712-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6909140#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6909095#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6909074#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6909071#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6909069#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6909064#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6909063#L921-9 assume !(1 == ~currentHeading~0); 6909061#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6909056#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6909051#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6911738#L2708-103 assume !(0 == isFloorCalling_~floorID); 6911737#L2712-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6911733#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6911731#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6911727#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6911724#L2482-7 cleanup_~i~1 := 0; 6911721#L1757-2 assume !false; 6911722#L1758 [2018-11-28 10:36:13,632 INFO L796 eck$LassoCheckResult]: Loop: 6911722#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 6969937#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 6969934#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 6969935#L1765 assume 1 != cleanup_~tmp___0~8; 6969928#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6969929#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6969907#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 6969908#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 6984920#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 6984919#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 6973962#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6973963#L2708-109 assume !(0 == isFloorCalling_~floorID); 6973953#L2712-109 assume !(1 == isFloorCalling_~floorID); 6973954#L2716-109 assume !(2 == isFloorCalling_~floorID); 6973957#L2720-109 assume !(3 == isFloorCalling_~floorID); 6973958#L2724-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6984916#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6986887#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6986886#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6986885#L2708-111 assume !(0 == isFloorCalling_~floorID); 6984778#L2712-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6984775#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 6985546#L954-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 6984723#L329-9 assume !(0 == buttonForFloorIsPressed_~floorID); 6984722#L333-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 6984718#L350-9 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25; 6984716#L961-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 6984715#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6984714#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 6984712#L1134-4 assume !(0 != timeShift_~tmp___9~2); 6984711#L1225-12 assume !(1 == ~doorState~0); 6984710#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6984708#L2708-112 assume !(0 == isFloorCalling_~floorID); 6984707#L2712-112 assume !(1 == isFloorCalling_~floorID); 6984706#L2716-112 assume !(2 == isFloorCalling_~floorID); 6984705#L2720-112 assume !(3 == isFloorCalling_~floorID); 6984702#L2724-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6984703#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6986939#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 6986937#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6986936#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6984625#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 6984621#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 6984622#L921-12 assume !(1 == ~currentHeading~0); 6989791#L931-36 assume !(0 == ~currentFloorID~0); 6986100#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6985998#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6985997#L2708-134 assume !(0 == isFloorCalling_~floorID); 6985996#L2712-134 assume !(1 == isFloorCalling_~floorID); 6985995#L2716-134 assume !(2 == isFloorCalling_~floorID); 6985994#L2720-134 assume !(3 == isFloorCalling_~floorID); 6985993#L2724-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6985992#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6985991#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6985989#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6969942#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 6969940#L1757-2 assume !false; 6911722#L1758 [2018-11-28 10:36:13,636 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:13,637 INFO L82 PathProgramCache]: Analyzing trace with hash -362685206, now seen corresponding path program 4 times [2018-11-28 10:36:13,637 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:13,637 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:13,637 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:13,637 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:36:13,637 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:13,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:13,708 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:13,708 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:13,708 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:36:13,708 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:36:13,708 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:13,709 INFO L82 PathProgramCache]: Analyzing trace with hash -1840614716, now seen corresponding path program 1 times [2018-11-28 10:36:13,709 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:13,709 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:13,709 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:13,709 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:36:13,709 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:13,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:13,727 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:13,727 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:13,728 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 10:36:13,728 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:36:13,728 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 10:36:13,728 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 10:36:13,728 INFO L87 Difference]: Start difference. First operand 206562 states and 366545 transitions. cyclomatic complexity: 160059 Second operand 5 states. [2018-11-28 10:36:17,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:36:17,258 INFO L93 Difference]: Finished difference Result 669785 states and 1184577 transitions. [2018-11-28 10:36:17,259 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 10:36:17,259 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 669785 states and 1184577 transitions. [2018-11-28 10:36:19,619 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 225029 [2018-11-28 10:36:20,823 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 669785 states to 669785 states and 1184577 transitions. [2018-11-28 10:36:20,823 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 508767 [2018-11-28 10:36:21,060 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 508767 [2018-11-28 10:36:21,060 INFO L73 IsDeterministic]: Start isDeterministic. Operand 669785 states and 1184577 transitions. [2018-11-28 10:36:21,061 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:36:21,061 INFO L705 BuchiCegarLoop]: Abstraction has 669785 states and 1184577 transitions. [2018-11-28 10:36:21,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 669785 states and 1184577 transitions. [2018-11-28 10:36:30,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 669785 to 207030. [2018-11-28 10:36:30,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 207030 states. [2018-11-28 10:36:30,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207030 states to 207030 states and 366971 transitions. [2018-11-28 10:36:30,949 INFO L728 BuchiCegarLoop]: Abstraction has 207030 states and 366971 transitions. [2018-11-28 10:36:30,949 INFO L608 BuchiCegarLoop]: Abstraction has 207030 states and 366971 transitions. [2018-11-28 10:36:30,949 INFO L442 BuchiCegarLoop]: ======== Iteration 18============ [2018-11-28 10:36:30,949 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 207030 states and 366971 transitions. [2018-11-28 10:36:31,279 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 67528 [2018-11-28 10:36:31,279 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:36:31,280 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:36:31,281 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:31,282 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:31,282 INFO L794 eck$LassoCheckResult]: Stem: 7716434#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 7716435#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 7711143#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 7711144#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 7713592#L1952 assume 0 != main_~tmp~21; 7713277#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 7713278#L2551 assume !(0 == getOrigin_~person); 7717271#L2555 assume !(1 == getOrigin_~person); 7716963#L2559 assume !(2 == getOrigin_~person); 7716964#L2563 assume !(3 == getOrigin_~person); 7717775#L2567 assume !(4 == getOrigin_~person); 7717707#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 7716466#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7713539#L2979 assume 0 == initPersonOnFloor_~floor; 7713463#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 7711210#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7714905#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7714906#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7715520#L2708 assume !(0 == isFloorCalling_~floorID); 7710496#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7710497#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7717948#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7717949#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7713867#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 7713868#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7717987#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 7721409#L1134 assume !(0 != timeShift_~tmp___9~2); 7721410#L1225 assume !(1 == ~doorState~0); 7723985#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7718027#L2708-3 assume !(0 == isFloorCalling_~floorID); 7718029#L2712-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7718005#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7718006#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 7718130#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7718131#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7723914#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 7723906#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 7723899#L921 assume !(1 == ~currentHeading~0); 7723893#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7723887#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7723885#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7723879#L2708-25 assume !(0 == isFloorCalling_~floorID); 7723880#L2712-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7723871#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7723872#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 7723859#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 7723860#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7723845#L2708-26 assume !(0 == isFloorCalling_~floorID); 7723847#L2712-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7729004#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7729003#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7729001#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7729000#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 7728998#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7728997#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 7728995#L1134-1 assume !(0 != timeShift_~tmp___9~2); 7728994#L1225-3 assume !(1 == ~doorState~0); 7728993#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7728991#L2708-29 assume !(0 == isFloorCalling_~floorID); 7728989#L2712-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7728985#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7728984#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 7728982#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7728980#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7728117#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 7728106#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 7728056#L921-3 assume !(1 == ~currentHeading~0); 7728030#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7728018#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7728010#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7727983#L2708-51 assume !(0 == isFloorCalling_~floorID); 7727985#L2712-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7742138#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7742137#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 7742132#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 7742130#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7727934#L2708-52 assume !(0 == isFloorCalling_~floorID); 7727935#L2712-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7727918#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7727919#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7727908#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7727910#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 7727881#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7727883#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 7727719#L1134-2 assume !(0 != timeShift_~tmp___9~2); 7727721#L1225-6 assume !(1 == ~doorState~0); 7727651#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7727652#L2708-55 assume !(0 == isFloorCalling_~floorID); 7742122#L2712-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7742119#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7742114#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 7742115#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7743012#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7742962#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 7742960#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 7742957#L921-6 assume !(1 == ~currentHeading~0); 7741920#L931-18 assume !(0 == ~currentFloorID~0); 7741910#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7734974#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7734975#L2708-77 assume !(0 == isFloorCalling_~floorID); 7734967#L2712-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7734965#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7734961#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 7734952#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 7734949#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 7734941#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 7734935#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7734932#L2979-1 assume 0 == initPersonOnFloor_~floor; 7734909#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 7734864#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7734849#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7725050#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7725051#L2708-78 assume !(0 == isFloorCalling_~floorID); 7734775#L2712-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7756490#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7756491#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7756659#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7756657#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 7756649#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7756650#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 7791083#L1134-3 assume !(0 != timeShift_~tmp___9~2); 7791084#L1225-9 assume !(1 == ~doorState~0); 7791681#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7791679#L2708-81 assume !(0 == isFloorCalling_~floorID); 7791677#L2712-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7791669#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7791667#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 7791639#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7791588#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7791587#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 7791475#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 7791457#L921-9 assume !(1 == ~currentHeading~0); 7791451#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7781539#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7781534#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7790607#L2708-103 assume !(0 == isFloorCalling_~floorID); 7790609#L2712-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7816687#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7816670#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 7816654#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 7815737#L2482-7 cleanup_~i~1 := 0; 7815730#L1757-2 assume !false; 7815731#L1758 [2018-11-28 10:36:31,282 INFO L796 eck$LassoCheckResult]: Loop: 7815731#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 7886652#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 7886651#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 7886650#L1765 assume 1 != cleanup_~tmp___0~8; 7886649#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7886647#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7886646#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 7886577#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 7886432#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 7879842#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 7879256#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7858084#L2708-109 assume !(0 == isFloorCalling_~floorID); 7858086#L2712-109 assume !(1 == isFloorCalling_~floorID); 7857376#L2716-109 assume !(2 == isFloorCalling_~floorID); 7857377#L2720-109 assume !(3 == isFloorCalling_~floorID); 7857372#L2724-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7857373#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7883546#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7883545#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7883543#L2708-111 assume !(0 == isFloorCalling_~floorID); 7883544#L2712-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7886109#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 7886110#L954-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 7886105#L329-9 assume !(0 == buttonForFloorIsPressed_~floorID); 7886100#L333-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 7886082#L350-9 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25; 7886061#L961-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 7886058#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7886057#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 7886055#L1134-4 assume !(0 != timeShift_~tmp___9~2); 7886054#L1225-12 assume !(1 == ~doorState~0); 7886035#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7886034#L2708-112 assume !(0 == isFloorCalling_~floorID); 7886033#L2712-112 assume !(1 == isFloorCalling_~floorID); 7886032#L2716-112 assume !(2 == isFloorCalling_~floorID); 7886031#L2720-112 assume !(3 == isFloorCalling_~floorID); 7886029#L2724-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7886028#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7886027#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 7886026#L864-8 assume !(0 != stopRequestedInDirection_~tmp___0~2);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret9, stopRequestedInDirection__wrappee__empty_#t~ret10, stopRequestedInDirection__wrappee__empty_#t~ret11, stopRequestedInDirection__wrappee__empty_#t~ret12, stopRequestedInDirection__wrappee__empty_#t~ret13, stopRequestedInDirection__wrappee__empty_#t~ret14, stopRequestedInDirection__wrappee__empty_#t~ret15, stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~8, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~8;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 7886024#L516-8 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~29;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~29;isTopFloor_~retValue_acc~29 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~29; 7886023#L3282-20 stopRequestedInDirection__wrappee__empty_#t~ret9 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret9;havoc stopRequestedInDirection__wrappee__empty_#t~ret9; 7885994#L520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~5;stopRequestedInDirection__wrappee__empty_~retValue_acc~8 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~8; 7885087#L838-8 stopRequestedInDirection_#t~ret22 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~9 := stopRequestedInDirection_#t~ret22;havoc stopRequestedInDirection_#t~ret22;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7885988#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 7885986#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 7885987#L921-12 assume !(1 == ~currentHeading~0); 7886287#L931-36 assume !(0 == ~currentFloorID~0); 7882780#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7858415#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7858416#L2708-134 assume !(0 == isFloorCalling_~floorID); 7879998#L2712-134 assume !(1 == isFloorCalling_~floorID); 7879994#L2716-134 assume !(2 == isFloorCalling_~floorID); 7879995#L2720-134 assume !(3 == isFloorCalling_~floorID); 7879996#L2724-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7879997#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7886660#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 7886656#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 7886654#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 7886653#L1757-2 assume !false; 7815731#L1758 [2018-11-28 10:36:31,290 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:31,291 INFO L82 PathProgramCache]: Analyzing trace with hash -362685206, now seen corresponding path program 5 times [2018-11-28 10:36:31,291 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:31,291 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:31,291 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:31,291 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:36:31,291 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:31,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:31,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:31,354 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:31,354 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:36:31,354 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:36:31,354 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:31,354 INFO L82 PathProgramCache]: Analyzing trace with hash -569704470, now seen corresponding path program 1 times [2018-11-28 10:36:31,354 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:31,354 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:31,355 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:31,355 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:36:31,355 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:31,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:31,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:31,379 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:31,379 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 10:36:31,379 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:36:31,380 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 10:36:31,380 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 10:36:31,380 INFO L87 Difference]: Start difference. First operand 207030 states and 366971 transitions. cyclomatic complexity: 160017 Second operand 5 states. [2018-11-28 10:36:32,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:36:32,758 INFO L93 Difference]: Finished difference Result 511851 states and 900971 transitions. [2018-11-28 10:36:32,758 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 10:36:32,759 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 511851 states and 900971 transitions. [2018-11-28 10:36:34,462 INFO L131 ngComponentsAnalysis]: Automaton has 112 accepting balls. 180667 [2018-11-28 10:36:35,365 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 511851 states to 511851 states and 900971 transitions. [2018-11-28 10:36:35,365 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 383968 [2018-11-28 10:36:35,511 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 383968 [2018-11-28 10:36:35,511 INFO L73 IsDeterministic]: Start isDeterministic. Operand 511851 states and 900971 transitions. [2018-11-28 10:36:35,514 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:36:35,514 INFO L705 BuchiCegarLoop]: Abstraction has 511851 states and 900971 transitions. [2018-11-28 10:36:35,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511851 states and 900971 transitions. [2018-11-28 10:36:38,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511851 to 207535. [2018-11-28 10:36:38,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 207535 states. [2018-11-28 10:36:38,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207535 states to 207535 states and 367445 transitions. [2018-11-28 10:36:38,466 INFO L728 BuchiCegarLoop]: Abstraction has 207535 states and 367445 transitions. [2018-11-28 10:36:38,466 INFO L608 BuchiCegarLoop]: Abstraction has 207535 states and 367445 transitions. [2018-11-28 10:36:38,466 INFO L442 BuchiCegarLoop]: ======== Iteration 19============ [2018-11-28 10:36:38,466 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 207535 states and 367445 transitions. [2018-11-28 10:36:38,798 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 67595 [2018-11-28 10:36:38,798 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:36:38,798 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:36:38,799 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:38,799 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:38,800 INFO L794 eck$LassoCheckResult]: Stem: 8435496#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 8435497#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 8430055#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 8430056#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 8432519#L1952 assume 0 != main_~tmp~21; 8432202#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 8432203#L2551 assume !(0 == getOrigin_~person); 8436418#L2555 assume !(1 == getOrigin_~person); 8436088#L2559 assume !(2 == getOrigin_~person); 8436089#L2563 assume !(3 == getOrigin_~person); 8436952#L2567 assume !(4 == getOrigin_~person); 8436882#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 8435528#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 8432467#L2979 assume 0 == initPersonOnFloor_~floor; 8432388#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8430116#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8433903#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8433904#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8430669#L2708 assume !(0 == isFloorCalling_~floorID); 8429398#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8429399#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8437194#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8437195#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8437187#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 8437188#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8437214#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 8437326#L1134 assume !(0 != timeShift_~tmp___9~2); 8437328#L1225 assume !(1 == ~doorState~0); 8447802#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8447801#L2708-3 assume !(0 == isFloorCalling_~floorID); 8447800#L2712-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8437377#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8437378#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 8437334#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8437335#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8437321#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 8437322#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 8447772#L921 assume !(1 == ~currentHeading~0); 8447770#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8447766#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8447761#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8447762#L2708-25 assume !(0 == isFloorCalling_~floorID); 8447755#L2712-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8447754#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8447735#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 8447736#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 8497045#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8497044#L2708-26 assume !(0 == isFloorCalling_~floorID); 8497043#L2712-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8497038#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8497036#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8497033#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8497031#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 8497028#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8497026#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 8497024#L1134-1 assume !(0 != timeShift_~tmp___9~2); 8496978#L1225-3 assume !(1 == ~doorState~0); 8496970#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8496966#L2708-29 assume !(0 == isFloorCalling_~floorID); 8496957#L2712-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8496948#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8496898#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 8496891#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8496887#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8496599#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 8496579#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 8496501#L921-3 assume !(1 == ~currentHeading~0); 8496502#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8496487#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8496481#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8511041#L2708-51 assume !(0 == isFloorCalling_~floorID); 8511038#L2712-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8510911#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8510709#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 8510650#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 8484718#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8484717#L2708-52 assume !(0 == isFloorCalling_~floorID); 8484714#L2712-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8484711#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8484452#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8484397#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8484386#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 8484243#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8484058#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 8484045#L1134-2 assume !(0 != timeShift_~tmp___9~2); 8484010#L1225-6 assume !(1 == ~doorState~0); 8484005#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8484003#L2708-55 assume !(0 == isFloorCalling_~floorID); 8484002#L2712-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8483998#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8483996#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 8483988#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8483921#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8483920#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 8483918#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 8483917#L921-6 assume !(1 == ~currentHeading~0); 8483916#L931-18 assume !(0 == ~currentFloorID~0); 8483904#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8483895#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8526108#L2708-77 assume !(0 == isFloorCalling_~floorID); 8429522#L2712-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8429523#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8525997#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 8525992#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 8525990#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 8525988#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 8525983#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 8525982#L2979-1 assume 0 == initPersonOnFloor_~floor; 8525962#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8525948#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8525947#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8490562#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8525691#L2708-78 assume !(0 == isFloorCalling_~floorID); 8429541#L2712-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8429543#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8496470#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8496468#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8496467#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 8496464#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8496465#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 8502337#L1134-3 assume !(0 != timeShift_~tmp___9~2); 8502333#L1225-9 assume !(1 == ~doorState~0); 8502215#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8502209#L2708-81 assume !(0 == isFloorCalling_~floorID); 8502206#L2712-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8502195#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8502092#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 8502074#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8502007#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8502006#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 8502004#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 8502001#L921-9 assume !(1 == ~currentHeading~0); 8502002#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8501989#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8501984#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8526009#L2708-103 assume !(0 == isFloorCalling_~floorID); 8432414#L2712-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8431289#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8510644#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 8510639#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 8510618#L2482-7 cleanup_~i~1 := 0; 8510079#L1757-2 assume !false; 8510080#L1758 [2018-11-28 10:36:38,800 INFO L796 eck$LassoCheckResult]: Loop: 8510080#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 8601631#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 8601626#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 8601623#L1765 assume 1 != cleanup_~tmp___0~8; 8601620#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8601611#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8601612#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 8601070#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 8601061#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 8601056#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 8589958#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8589957#L2708-109 assume !(0 == isFloorCalling_~floorID); 8589956#L2712-109 assume !(1 == isFloorCalling_~floorID); 8589955#L2716-109 assume !(2 == isFloorCalling_~floorID); 8589949#L2720-109 assume !(3 == isFloorCalling_~floorID); 8589947#L2724-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8589946#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8589945#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8589944#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8589937#L2708-111 assume !(0 == isFloorCalling_~floorID); 8587543#L2712-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8587540#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 8591031#L954-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 8572813#L329-9 assume !(0 == buttonForFloorIsPressed_~floorID); 8572808#L333-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 8572803#L350-9 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25; 8572799#L961-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 8572797#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8572795#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 8572791#L1134-4 assume !(0 != timeShift_~tmp___9~2); 8572789#L1225-12 assume !(1 == ~doorState~0); 8572787#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8572785#L2708-112 assume !(0 == isFloorCalling_~floorID); 8570422#L2712-112 assume !(1 == isFloorCalling_~floorID); 8570418#L2716-112 assume !(2 == isFloorCalling_~floorID); 8570419#L2720-112 assume !(3 == isFloorCalling_~floorID); 8570420#L2724-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8570421#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8578875#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 8578832#L864-8 assume !(0 != stopRequestedInDirection_~tmp___0~2);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret9, stopRequestedInDirection__wrappee__empty_#t~ret10, stopRequestedInDirection__wrappee__empty_#t~ret11, stopRequestedInDirection__wrappee__empty_#t~ret12, stopRequestedInDirection__wrappee__empty_#t~ret13, stopRequestedInDirection__wrappee__empty_#t~ret14, stopRequestedInDirection__wrappee__empty_#t~ret15, stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~8, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~8;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 8578829#L516-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 8578830#L685-8 assume !(0 == ~currentFloorID~0); 8578856#L691-8 assume !(~currentFloorID~0 > 0); 8448050#L706-8 assume ~currentFloorID~0 > 0; 8578849#L708-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 8568843#L709-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~8 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~8; 8578797#L838-8 stopRequestedInDirection_#t~ret22 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~9 := stopRequestedInDirection_#t~ret22;havoc stopRequestedInDirection_#t~ret22;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8578793#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 8578794#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 8601150#L921-12 assume !(1 == ~currentHeading~0); 8601146#L931-36 assume !(0 == ~currentFloorID~0); 8601140#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8601128#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8601126#L2708-134 assume !(0 == isFloorCalling_~floorID); 8601083#L2712-134 assume !(1 == isFloorCalling_~floorID); 8601079#L2716-134 assume !(2 == isFloorCalling_~floorID); 8601080#L2720-134 assume !(3 == isFloorCalling_~floorID); 8601081#L2724-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8601082#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8602074#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 8601977#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 8601973#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 8601641#L1757-2 assume !false; 8510080#L1758 [2018-11-28 10:36:38,809 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:38,809 INFO L82 PathProgramCache]: Analyzing trace with hash -362685206, now seen corresponding path program 6 times [2018-11-28 10:36:38,809 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:38,809 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:38,810 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:38,810 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:36:38,810 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:38,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:38,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:38,852 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:38,852 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:36:38,852 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:36:38,852 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:38,852 INFO L82 PathProgramCache]: Analyzing trace with hash -1373721899, now seen corresponding path program 1 times [2018-11-28 10:36:38,852 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:38,852 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:38,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:38,853 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:36:38,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:38,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:38,899 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:38,899 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:38,899 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 10:36:38,899 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:36:38,899 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 10:36:38,899 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-28 10:36:38,900 INFO L87 Difference]: Start difference. First operand 207535 states and 367445 transitions. cyclomatic complexity: 159986 Second operand 4 states. [2018-11-28 10:36:41,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:36:41,699 INFO L93 Difference]: Finished difference Result 358226 states and 631815 transitions. [2018-11-28 10:36:41,699 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-28 10:36:41,699 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 358226 states and 631815 transitions. [2018-11-28 10:36:42,508 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 113835 [2018-11-28 10:36:43,195 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 358226 states to 358034 states and 631623 transitions. [2018-11-28 10:36:43,195 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 270453 [2018-11-28 10:36:43,329 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 270453 [2018-11-28 10:36:43,329 INFO L73 IsDeterministic]: Start isDeterministic. Operand 358034 states and 631623 transitions. [2018-11-28 10:36:43,336 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:36:43,336 INFO L705 BuchiCegarLoop]: Abstraction has 358034 states and 631623 transitions. [2018-11-28 10:36:43,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 358034 states and 631623 transitions. [2018-11-28 10:36:45,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 358034 to 285529. [2018-11-28 10:36:45,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 285529 states. [2018-11-28 10:36:46,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285529 states to 285529 states and 502957 transitions. [2018-11-28 10:36:46,093 INFO L728 BuchiCegarLoop]: Abstraction has 285529 states and 502957 transitions. [2018-11-28 10:36:46,093 INFO L608 BuchiCegarLoop]: Abstraction has 285529 states and 502957 transitions. [2018-11-28 10:36:46,093 INFO L442 BuchiCegarLoop]: ======== Iteration 20============ [2018-11-28 10:36:46,093 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 285529 states and 502957 transitions. [2018-11-28 10:36:46,541 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 94357 [2018-11-28 10:36:46,541 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:36:46,542 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:36:46,543 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:46,543 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:46,543 INFO L794 eck$LassoCheckResult]: Stem: 9001356#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 9001357#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 8995818#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 8995819#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 8998343#L1952 assume 0 != main_~tmp~21; 8998000#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 8998001#L2551 assume !(0 == getOrigin_~person); 9002331#L2555 assume !(1 == getOrigin_~person); 9001990#L2559 assume !(2 == getOrigin_~person); 9001991#L2563 assume !(3 == getOrigin_~person); 9002950#L2567 assume !(4 == getOrigin_~person); 9002850#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 9001388#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 8998277#L2979 assume 0 == initPersonOnFloor_~floor; 8998187#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8995882#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8999745#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8999746#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9000384#L2708 assume !(0 == isFloorCalling_~floorID); 8995167#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8995168#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9003225#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9003226#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8998648#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 8998649#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9003418#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9009159#L1134 assume !(0 != timeShift_~tmp___9~2); 9009158#L1225 assume !(1 == ~doorState~0); 9003389#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9003373#L2708-3 assume !(0 == isFloorCalling_~floorID); 9003368#L2712-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9003362#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9003363#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9003306#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9003307#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9003278#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9003279#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9009116#L921 assume !(1 == ~currentHeading~0); 9009168#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9009041#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9009036#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9009037#L2708-25 assume !(0 == isFloorCalling_~floorID); 9009030#L2712-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9009029#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9009019#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9009020#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9008997#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9008998#L2708-26 assume !(0 == isFloorCalling_~floorID); 9008993#L2712-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9008988#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9008986#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9008979#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9008978#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 9008974#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9008976#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9019368#L1134-1 assume !(0 != timeShift_~tmp___9~2); 9019361#L1225-3 assume !(1 == ~doorState~0); 9019359#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9019357#L2708-29 assume !(0 == isFloorCalling_~floorID); 9019009#L2712-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9019003#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9019002#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9018999#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9018873#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9018861#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9018852#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9018839#L921-3 assume !(1 == ~currentHeading~0); 9018827#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9018815#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9018806#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9029573#L2708-51 assume !(0 == isFloorCalling_~floorID); 9029571#L2712-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9029568#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9029567#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9029558#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9029555#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9029553#L2708-52 assume !(0 == isFloorCalling_~floorID); 9029484#L2712-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9029481#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9029478#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9029477#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9029476#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 9029474#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9029473#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9029471#L1134-2 assume !(0 != timeShift_~tmp___9~2); 9029470#L1225-6 assume !(1 == ~doorState~0); 9029469#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9029248#L2708-55 assume !(0 == isFloorCalling_~floorID); 9029242#L2712-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9029236#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9029234#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9029230#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9029227#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9029198#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9029188#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9029170#L921-6 assume !(1 == ~currentHeading~0); 9029153#L931-18 assume !(0 == ~currentFloorID~0); 9029143#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9029135#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9056288#L2708-77 assume !(0 == isFloorCalling_~floorID); 9056284#L2712-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9056283#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9056282#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9056277#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9056274#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 9056275#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 9060538#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9060536#L2979-1 assume 0 == initPersonOnFloor_~floor; 9029040#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 9029027#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 9056200#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 9060503#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9060502#L2708-78 assume !(0 == isFloorCalling_~floorID); 9060501#L2712-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9028963#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9028961#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9028962#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9060494#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 9059750#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9059751#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9103733#L1134-3 assume !(0 != timeShift_~tmp___9~2); 9103734#L1225-9 assume !(1 == ~doorState~0); 9108115#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9076185#L2708-81 assume !(0 == isFloorCalling_~floorID); 9072160#L2712-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9070918#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9072245#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9072246#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9076448#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9108098#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9108096#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9108097#L921-9 assume !(1 == ~currentHeading~0); 9076536#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9076534#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9076526#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9080764#L2708-103 assume !(0 == isFloorCalling_~floorID); 9080762#L2712-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9080756#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9080305#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9076494#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9076491#L2482-7 cleanup_~i~1 := 0; 9076492#L1757-2 assume !false; 9080191#L1758 [2018-11-28 10:36:46,544 INFO L796 eck$LassoCheckResult]: Loop: 9080191#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 9207198#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 9207197#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 9207196#L1765 assume 1 != cleanup_~tmp___0~8; 9207195#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9207193#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9207192#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 9207169#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 9207161#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 9207160#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 9207159#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9207157#L2708-109 assume !(0 == isFloorCalling_~floorID); 9207156#L2712-109 assume !(1 == isFloorCalling_~floorID); 9207155#L2716-109 assume !(2 == isFloorCalling_~floorID); 9207154#L2720-109 assume !(3 == isFloorCalling_~floorID); 9207153#L2724-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9207152#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9207151#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9207150#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9207143#L2708-111 assume !(0 == isFloorCalling_~floorID); 9193695#L2712-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9193689#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 9193685#L954-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 9193686#L329-9 assume !(0 == buttonForFloorIsPressed_~floorID); 9193700#L333-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 9193690#L350-9 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25; 9193687#L961-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 9193688#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9193654#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9193655#L1134-4 assume !(0 != timeShift_~tmp___9~2); 9224221#L1225-12 assume !(1 == ~doorState~0); 9224220#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9224218#L2708-112 assume !(0 == isFloorCalling_~floorID); 9224217#L2712-112 assume !(1 == isFloorCalling_~floorID); 9224216#L2716-112 assume !(2 == isFloorCalling_~floorID); 9224215#L2720-112 assume !(3 == isFloorCalling_~floorID); 9224213#L2724-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9224212#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9224211#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9224210#L864-8 assume !(0 != stopRequestedInDirection_~tmp___0~2);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret9, stopRequestedInDirection__wrappee__empty_#t~ret10, stopRequestedInDirection__wrappee__empty_#t~ret11, stopRequestedInDirection__wrappee__empty_#t~ret12, stopRequestedInDirection__wrappee__empty_#t~ret13, stopRequestedInDirection__wrappee__empty_#t~ret14, stopRequestedInDirection__wrappee__empty_#t~ret15, stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~8, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~8;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 9224208#L516-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 9224207#L685-8 assume !(0 == ~currentFloorID~0); 9224206#L691-8 assume ~currentFloorID~0 > 0; 9224205#L692-8 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 9224102#L706-8 assume ~currentFloorID~0 > 0; 9224204#L708-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 9224113#L709-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~8 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~8; 9224099#L838-8 stopRequestedInDirection_#t~ret22 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~9 := stopRequestedInDirection_#t~ret22;havoc stopRequestedInDirection_#t~ret22;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9224089#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9224090#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9224013#L921-12 assume !(1 == ~currentHeading~0); 9223950#L931-36 assume !(0 == ~currentFloorID~0); 9212746#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9207215#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9207213#L2708-134 assume !(0 == isFloorCalling_~floorID); 9207212#L2712-134 assume !(1 == isFloorCalling_~floorID); 9207211#L2716-134 assume !(2 == isFloorCalling_~floorID); 9207210#L2720-134 assume !(3 == isFloorCalling_~floorID); 9207208#L2724-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9207207#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9207206#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9207201#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9207199#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 9196780#L1757-2 assume !false; 9080191#L1758 [2018-11-28 10:36:46,552 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:46,553 INFO L82 PathProgramCache]: Analyzing trace with hash -362685206, now seen corresponding path program 7 times [2018-11-28 10:36:46,553 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:46,553 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:46,553 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:46,553 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:36:46,553 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:46,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:46,620 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:46,620 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:46,620 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:36:46,620 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:36:46,620 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:46,620 INFO L82 PathProgramCache]: Analyzing trace with hash -1601695086, now seen corresponding path program 1 times [2018-11-28 10:36:46,620 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:46,621 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:46,621 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:46,621 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:36:46,621 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:46,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:46,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:46,649 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:46,649 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:36:46,649 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 10:36:46,650 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 10:36:46,650 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 10:36:46,650 INFO L87 Difference]: Start difference. First operand 285529 states and 502957 transitions. cyclomatic complexity: 217527 Second operand 6 states. [2018-11-28 10:36:48,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:36:48,475 INFO L93 Difference]: Finished difference Result 499497 states and 875512 transitions. [2018-11-28 10:36:48,475 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-28 10:36:48,475 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 499497 states and 875512 transitions. [2018-11-28 10:36:49,718 INFO L131 ngComponentsAnalysis]: Automaton has 118 accepting balls. 173206 [2018-11-28 10:36:56,144 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 499497 states to 499497 states and 875512 transitions. [2018-11-28 10:36:56,144 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 374341 [2018-11-28 10:36:56,277 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 374341 [2018-11-28 10:36:56,277 INFO L73 IsDeterministic]: Start isDeterministic. Operand 499497 states and 875512 transitions. [2018-11-28 10:36:56,287 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 10:36:56,287 INFO L705 BuchiCegarLoop]: Abstraction has 499497 states and 875512 transitions. [2018-11-28 10:36:56,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499497 states and 875512 transitions. [2018-11-28 10:36:58,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499497 to 285529. [2018-11-28 10:36:58,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 285529 states. [2018-11-28 10:36:59,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285529 states to 285529 states and 500061 transitions. [2018-11-28 10:36:59,145 INFO L728 BuchiCegarLoop]: Abstraction has 285529 states and 500061 transitions. [2018-11-28 10:36:59,145 INFO L608 BuchiCegarLoop]: Abstraction has 285529 states and 500061 transitions. [2018-11-28 10:36:59,145 INFO L442 BuchiCegarLoop]: ======== Iteration 21============ [2018-11-28 10:36:59,145 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 285529 states and 500061 transitions. [2018-11-28 10:36:59,536 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 94357 [2018-11-28 10:36:59,537 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 10:36:59,537 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 10:36:59,538 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:59,538 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 10:36:59,538 INFO L794 eck$LassoCheckResult]: Stem: 9786362#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 9786363#L-1 havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21; 9780883#L2445 havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 9780884#L2453 main_#t~ret114 := valid_product_#res;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 9783383#L1952 assume 0 != main_~tmp~21; 9783041#L1925 havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 9783042#L2551 assume !(0 == getOrigin_~person); 9787326#L2555 assume !(1 == getOrigin_~person); 9786979#L2559 assume !(2 == getOrigin_~person); 9786980#L2563 assume !(3 == getOrigin_~person); 9787893#L2567 assume !(4 == getOrigin_~person); 9787815#L2571 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~25 := 1;getOrigin_#res := getOrigin_~retValue_acc~25; 9786394#L2576 bigMacCall_#t~ret107 := getOrigin_#res;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9783324#L2979 assume 0 == initPersonOnFloor_~floor; 9783232#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 9780947#L3087-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 9784778#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 9784779#L2783-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9785412#L2708 assume !(0 == isFloorCalling_~floorID); 9780233#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9780234#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9788178#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9788179#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9783693#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 9783694#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9788232#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9791870#L1134 assume !(0 != timeShift_~tmp___9~2); 9788275#L1225 assume !(1 == ~doorState~0); 9788274#L1225-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9788258#L2708-3 assume !(0 == isFloorCalling_~floorID); 9788260#L2712-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9792351#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9792350#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9788960#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9788961#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9788951#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9788952#L1233 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9792324#L921 assume !(1 == ~currentHeading~0); 9792318#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9792312#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9792308#L937-5 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9792307#L2708-25 assume !(0 == isFloorCalling_~floorID); 9780012#L2712-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9780013#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9792285#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9792278#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9792251#L2482-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9792252#L2708-26 assume !(0 == isFloorCalling_~floorID); 9779966#L2712-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9779968#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9790131#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9790114#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9789273#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 9789271#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9789272#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9805372#L1134-1 assume !(0 != timeShift_~tmp___9~2); 9805364#L1225-3 assume !(1 == ~doorState~0); 9805264#L1225-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9805255#L2708-29 assume !(0 == isFloorCalling_~floorID); 9805219#L2712-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9804935#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9804919#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9804682#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9804239#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9804237#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9804141#L1233-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9803977#L921-3 assume !(1 == ~currentHeading~0); 9803965#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9803953#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9803944#L937-11 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9810637#L2708-51 assume !(0 == isFloorCalling_~floorID); 9810639#L2712-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9810631#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9810632#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9810623#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9810622#L2482-3 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9818412#L2708-52 assume !(0 == isFloorCalling_~floorID); 9818401#L2712-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9818394#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9818392#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9818376#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9818378#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 9799582#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9799584#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9821205#L1134-2 assume !(0 != timeShift_~tmp___9~2); 9821207#L1225-6 assume !(1 == ~doorState~0); 9831994#L1225-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9831882#L2708-55 assume !(0 == isFloorCalling_~floorID); 9824726#L2712-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9824722#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9824635#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9824636#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9825435#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9825436#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9825364#L1233-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9825366#L921-6 assume !(1 == ~currentHeading~0); 9839515#L931-18 assume !(0 == ~currentFloorID~0); 9839507#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9839497#L937-17 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9839495#L2708-77 assume !(0 == isFloorCalling_~floorID); 9839491#L2712-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9839490#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9839488#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9839484#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9839482#L2482-5 havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 9839480#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 9839475#L2576-1 bobCall_#t~ret102 := getOrigin_#res;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9839474#L2979-1 assume 0 == initPersonOnFloor_~floor; 9839453#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 9839439#L3087-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 9839438#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 9831392#L2783-5 havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9839432#L2708-78 assume !(0 == isFloorCalling_~floorID); 9839431#L2712-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9839426#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9839425#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9839423#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9839422#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 9839419#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9839420#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9840434#L1134-3 assume !(0 != timeShift_~tmp___9~2); 9840429#L1225-9 assume !(1 == ~doorState~0); 9840430#L1225-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9840416#L2708-81 assume !(0 == isFloorCalling_~floorID); 9840418#L2712-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9840303#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9840304#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9840294#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9840295#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9841149#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9841150#L1233-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9868121#L921-9 assume !(1 == ~currentHeading~0); 9868119#L931-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9868110#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9868105#L937-23 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9885908#L2708-103 assume !(0 == isFloorCalling_~floorID); 9885907#L2712-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9885903#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9885901#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 9885897#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 9885895#L2482-7 cleanup_~i~1 := 0; 9885892#L1757-2 assume !false; 9885893#L1758 [2018-11-28 10:36:59,539 INFO L796 eck$LassoCheckResult]: Loop: 9885893#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 10005409#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 9997081#L139 cleanup_#t~ret108 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 9997080#L1765 assume 1 != cleanup_~tmp___0~8; 9997079#L1765-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9997077#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9997078#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 9997047#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 9997041#L484 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 9997040#L497 cleanup_#t~ret109 := isIdle_#res;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 9997039#L1777 assume !(0 != cleanup_~tmp~19);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9997038#L2708-109 assume !(0 == isFloorCalling_~floorID); 9969644#L2712-109 assume !(1 == isFloorCalling_~floorID); 9969645#L2716-109 assume !(2 == isFloorCalling_~floorID); 9969646#L2720-109 assume !(3 == isFloorCalling_~floorID); 9969642#L2724-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9969643#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9994471#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9994470#L981-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9994462#L2708-111 assume !(0 == isFloorCalling_~floorID); 9994463#L2712-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 10004183#L2735-111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 10011721#L954-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 9997320#L329-9 assume !(0 == buttonForFloorIsPressed_~floorID); 9997319#L333-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 9997315#L350-9 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25; 9997313#L961-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 9997311#L966-9 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9997308#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 9997306#L1134-4 assume !(0 != timeShift_~tmp___9~2); 9997305#L1225-12 assume !(1 == ~doorState~0); 9997299#L1225-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9997296#L2708-112 assume !(0 == isFloorCalling_~floorID); 9997295#L2712-112 assume !(1 == isFloorCalling_~floorID); 9997294#L2716-112 assume !(2 == isFloorCalling_~floorID); 9997292#L2720-112 assume !(3 == isFloorCalling_~floorID); 9997290#L2724-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9997289#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9997288#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 9997287#L864-8 assume !(0 != stopRequestedInDirection_~tmp___0~2);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret9, stopRequestedInDirection__wrappee__empty_#t~ret10, stopRequestedInDirection__wrappee__empty_#t~ret11, stopRequestedInDirection__wrappee__empty_#t~ret12, stopRequestedInDirection__wrappee__empty_#t~ret13, stopRequestedInDirection__wrappee__empty_#t~ret14, stopRequestedInDirection__wrappee__empty_#t~ret15, stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~8, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~8;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 9997285#L516-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 9997286#L685-8 assume !(0 == ~currentFloorID~0); 9997322#L691-8 assume ~currentFloorID~0 > 0; 9997309#L692-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9997303#L2708-118 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9997298#L2735-118 stopRequestedInDirection__wrappee__empty_#t~ret15 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~0 := stopRequestedInDirection__wrappee__empty_#t~ret15;havoc stopRequestedInDirection__wrappee__empty_#t~ret15; 9997247#L696-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~8 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~8; 9997241#L838-8 stopRequestedInDirection_#t~ret22 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~9 := stopRequestedInDirection_#t~ret22;havoc stopRequestedInDirection_#t~ret22;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9997240#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 9997233#L1233-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9997223#L921-12 assume !(1 == ~currentHeading~0); 9997221#L931-36 assume !(0 == ~currentFloorID~0); 9996654#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9996647#L937-29 havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9996646#L2708-134 assume !(0 == isFloorCalling_~floorID); 9996383#L2712-134 assume !(1 == isFloorCalling_~floorID); 9996379#L2716-134 assume !(2 == isFloorCalling_~floorID); 9996380#L2720-134 assume !(3 == isFloorCalling_~floorID); 9996381#L2724-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9996382#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 10021585#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 10021581#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 10021579#L2482-9 cleanup_~i~1 := 1 + cleanup_~i~1; 10021578#L1757-2 assume !false; 9885893#L1758 [2018-11-28 10:36:59,548 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:59,548 INFO L82 PathProgramCache]: Analyzing trace with hash -362685206, now seen corresponding path program 8 times [2018-11-28 10:36:59,548 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:59,548 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:59,549 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:59,549 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 10:36:59,549 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:59,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:36:59,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:36:59,613 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 10:36:59,613 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 10:36:59,613 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 10:36:59,613 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:36:59,613 INFO L82 PathProgramCache]: Analyzing trace with hash 1443839413, now seen corresponding path program 1 times [2018-11-28 10:36:59,613 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 10:36:59,613 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 10:36:59,614 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:59,614 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 10:36:59,614 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 10:36:59,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 10:36:59,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 10:37:00,200 WARN L180 SmtUtils]: Spent 563.00 ms on a formula simplification. DAG size of input: 242 DAG size of output: 197 [2018-11-28 10:37:00,607 WARN L180 SmtUtils]: Spent 402.00 ms on a formula simplification. DAG size of input: 152 DAG size of output: 147 [2018-11-28 10:37:00,608 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 10:37:00,608 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 10:37:00,609 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 10:37:00,609 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 10:37:00,609 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-28 10:37:00,609 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:00,609 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 10:37:00,609 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 10:37:00,609 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product27_true-unreach-call_true-termination.cil.c_Iteration21_Loop [2018-11-28 10:37:00,609 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 10:37:00,609 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 10:37:00,612 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,618 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,621 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,623 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,625 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,626 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,627 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,631 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,632 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,633 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,634 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,635 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,636 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,643 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,648 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,649 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,653 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,654 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,655 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,656 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,657 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,658 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,659 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,660 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,661 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,662 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,664 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,666 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,669 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,670 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,671 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,672 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,673 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,674 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,675 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,676 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,677 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,678 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,679 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,680 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,681 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,682 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,683 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,684 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,687 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,696 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,697 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,717 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,718 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,729 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,737 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,739 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,740 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,742 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,743 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,775 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:00,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:01,216 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 10:37:01,216 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,224 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,224 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,227 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,227 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret19=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret19=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,242 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,242 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,245 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,245 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,263 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,263 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,269 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,269 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret28=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret28=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,287 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,287 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,289 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,289 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,303 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,303 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,305 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,305 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,324 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,325 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,327 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,327 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,341 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,341 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,343 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,343 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,358 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,358 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,361 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,361 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,377 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,377 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,379 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,379 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret160=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret160=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,393 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,393 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,395 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,395 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret11=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,415 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,415 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,416 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,416 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret45=0} Honda state: {ULTIMATE.start_timeShift_#t~ret45=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,871 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,872 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,873 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,873 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,891 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,891 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,901 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,901 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret18=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret18=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,920 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,920 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,924 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,924 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~executiveFloor~0=-8, ULTIMATE.start_isFloorCalling_#in~floorID=-8, ULTIMATE.start_isFloorCalling_~floorID=-8} Honda state: {~executiveFloor~0=-8, ULTIMATE.start_isFloorCalling_#in~floorID=-8, ULTIMATE.start_isFloorCalling_~floorID=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,938 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,938 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,941 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,941 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_#res=0, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~3=0, ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8=0, ~floorButtons_1~0=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_#res=0, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~3=0, ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8=0, ~floorButtons_1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,956 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,956 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,959 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,959 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~11=0} Honda state: {ULTIMATE.start_timeShift_~tmp~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,977 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,977 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,981 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,981 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~calls_0~0=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0=-8, ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___9~0=-8} Honda state: {~calls_0~0=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0=-8, ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___9~0=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 76 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 76 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:01,997 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:01,997 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:01,999 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:01,999 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~2=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 77 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 77 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,017 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,017 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,019 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,019 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret51=0} Honda state: {ULTIMATE.start_timeShift_#t~ret51=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 78 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 78 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,039 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,039 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,041 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,041 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___2~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___2~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 79 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 79 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,059 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,059 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,062 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,062 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 80 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 80 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,076 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,076 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,078 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,078 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 81 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 81 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,092 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,092 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,094 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,094 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___1~8=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___1~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 82 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 82 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,109 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,109 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,110 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,111 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp~6=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 83 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 83 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,125 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,125 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,127 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,127 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret13=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 84 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 84 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,141 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,141 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,143 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,143 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret10=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret10=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 85 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 85 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,157 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,157 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,160 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,160 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~calls_1~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3=0} Honda state: {~calls_1~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 86 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 86 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,174 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,174 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,176 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,176 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~6=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 87 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 87 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,190 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,191 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,193 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,193 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret17=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret17=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 88 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 88 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,207 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,207 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,209 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,209 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,223 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,223 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,225 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,225 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,239 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,239 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,241 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,241 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~7=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,256 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,256 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,258 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,258 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,277 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,277 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,279 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,279 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___5~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___5~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,293 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,293 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,297 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,297 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___3~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___3~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,311 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,312 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,314 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,314 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret47=0} Honda state: {ULTIMATE.start_timeShift_#t~ret47=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,328 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,328 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,331 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,331 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~12=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~12=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,351 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,351 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,353 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,353 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=4} Honda state: {~doorState~0=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,367 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,367 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,369 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,369 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret42=0} Honda state: {ULTIMATE.start_timeShift_#t~ret42=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,390 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,390 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,392 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,392 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret100=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,406 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,406 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,408 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,408 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret16=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret16=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,422 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,422 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,424 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,425 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret49=0} Honda state: {ULTIMATE.start_timeShift_#t~ret49=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,439 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,439 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,441 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,441 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret4=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,462 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,462 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,464 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,464 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret8=0} Honda state: {ULTIMATE.start_isIdle_#t~ret8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,479 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,479 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,481 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,481 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~4=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,495 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,495 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,497 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,497 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~3=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,518 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,518 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,520 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,520 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___1~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___1~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 106 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 106 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,534 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,534 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,536 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,536 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 107 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 107 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,553 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,553 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,559 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,559 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir=-8, ULTIMATE.start_stopRequestedInDirection_~dir=-8, ~currentHeading~0=-8, ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~dir=-8, ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#in~dir=-8, ULTIMATE.start_stopRequestedInDirection_#in~dir=-8, ULTIMATE.start_continueInDirection_~dir=-8} Honda state: {ULTIMATE.start_continueInDirection_#in~dir=-8, ULTIMATE.start_stopRequestedInDirection_~dir=-8, ~currentHeading~0=-8, ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~dir=-8, ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#in~dir=-8, ULTIMATE.start_stopRequestedInDirection_#in~dir=-8, ULTIMATE.start_continueInDirection_~dir=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 108 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 108 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,574 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,574 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,576 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,576 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret44=0} Honda state: {ULTIMATE.start_timeShift_#t~ret44=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 109 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 109 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,595 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,595 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,598 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,598 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~7=0, ULTIMATE.start_cleanup_~tmp~19=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~7=0, ULTIMATE.start_cleanup_~tmp~19=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 110 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 110 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,617 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,617 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,618 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,618 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret109=0} Honda state: {ULTIMATE.start_cleanup_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 111 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 111 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,633 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,633 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,635 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,635 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___7~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___7~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 112 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 112 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,654 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,654 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,656 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,656 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~9=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 113 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 113 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,673 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,673 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,675 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,675 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret15=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret15=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 114 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 114 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,690 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,690 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,692 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,692 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 115 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 115 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,706 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,707 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,708 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,708 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp~27=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp~27=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 116 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 116 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,728 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,728 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,730 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,730 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret50=0} Honda state: {ULTIMATE.start_timeShift_#t~ret50=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 117 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 117 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,745 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,745 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,747 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,747 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___0~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___0~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 118 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 118 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,761 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,761 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,763 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,763 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 119 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 119 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,782 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,782 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,784 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,784 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret27=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret27=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 120 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 120 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,803 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,803 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,804 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,804 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret3=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 121 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 121 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,825 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,825 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,827 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,827 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret9=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 122 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 122 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,841 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,841 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,843 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,843 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___0~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___0~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 123 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 123 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,858 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,858 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,861 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,861 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~0=0, ULTIMATE.start_cleanup_~tmp___0~8=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~0=0, ULTIMATE.start_cleanup_~tmp___0~8=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 124 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 124 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,875 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,876 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,877 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,877 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret158=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret158=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 125 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 125 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,892 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,892 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,893 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,893 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret7=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 126 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 126 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,915 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,915 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,917 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,917 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___6~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 127 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 127 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,938 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,938 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,940 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,940 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret14=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret14=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 128 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 128 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,956 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,956 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,958 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,958 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret29=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret29=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 129 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 129 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,975 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,975 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,976 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,977 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 130 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 130 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:02,991 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:02,991 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:02,995 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:02,995 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~6=1, ULTIMATE.start_isIdle_~tmp~4=1} Honda state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~6=1, ULTIMATE.start_isIdle_~tmp~4=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 131 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 131 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,169 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,169 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,177 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,177 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret26=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret26=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 132 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 132 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,191 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,191 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,194 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,194 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 133 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 133 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,209 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,209 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,211 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,211 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___8~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 134 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 134 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,225 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,225 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,227 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,227 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 135 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 135 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,248 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,248 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,257 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,257 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret46=0} Honda state: {ULTIMATE.start_timeShift_#t~ret46=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 136 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 136 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,276 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,276 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,278 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,278 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret108=0} Honda state: {ULTIMATE.start_cleanup_#t~ret108=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 137 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 137 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,298 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,299 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,302 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,302 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#res=0, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~15=0, ULTIMATE.start_isFloorCalling_~retValue_acc~27=0, ULTIMATE.start_isExecutiveFloorCalling_#res=0} Honda state: {ULTIMATE.start_isFloorCalling_#res=0, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~15=0, ULTIMATE.start_isFloorCalling_~retValue_acc~27=0, ULTIMATE.start_isExecutiveFloorCalling_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 138 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 138 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,316 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,316 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,321 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,321 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret23=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 139 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 139 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,335 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,335 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,337 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 10:37:03,337 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret159=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret159=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 140 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 140 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,352 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 10:37:03,352 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7fd56d21-e12d-4b40-8482-833a1b44e655/bin-2019/uautomizer/z3 Starting monitored process 141 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 141 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,368 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-28 10:37:03,368 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 10:37:03,779 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-28 10:37:03,781 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 10:37:03,781 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 10:37:03,781 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 10:37:03,781 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 10:37:03,781 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-28 10:37:03,781 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 10:37:03,781 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 10:37:03,781 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 10:37:03,781 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product27_true-unreach-call_true-termination.cil.c_Iteration21_Loop [2018-11-28 10:37:03,781 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 10:37:03,781 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 10:37:03,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,802 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,810 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,814 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,817 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,841 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,860 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,862 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,871 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,880 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,894 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,898 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,899 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,907 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,908 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,909 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,909 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,912 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,913 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,921 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,922 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,923 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,928 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,929 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,930 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,937 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,938 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:03,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 10:37:04,396 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 10:37:04,396 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-28 10:37:04,401 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,401 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,401 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,401 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,401 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,402 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,402 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,402 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,402 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,403 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,403 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,403 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,403 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,403 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,403 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,403 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,403 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,404 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,404 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,404 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,404 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,404 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,404 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,404 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,404 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,405 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,405 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,405 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,405 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,405 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,405 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,405 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,405 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,406 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,406 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,406 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,406 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,406 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,406 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,406 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,407 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,407 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,407 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,407 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,407 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,407 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,408 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,408 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,408 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,408 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,408 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,408 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,408 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,408 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,409 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,409 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,409 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,409 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,409 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,409 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,410 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,410 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,410 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,410 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,410 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,410 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,411 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,411 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,411 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,411 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,411 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,411 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,411 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,412 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,412 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,412 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,412 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,412 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,412 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,412 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,413 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,413 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,413 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,413 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,413 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,413 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,414 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,414 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,414 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,414 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,414 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,414 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,414 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,415 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,415 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,415 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,415 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,415 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,415 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,415 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,416 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,416 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,416 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,416 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,416 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,416 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,416 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,416 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,417 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,417 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,417 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,417 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,417 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,417 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,417 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,417 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,418 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,418 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,418 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,418 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,418 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,418 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,418 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,419 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,419 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,419 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,419 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,419 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,419 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,420 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,420 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,420 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,420 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,420 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,421 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,421 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,421 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,421 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,421 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,421 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,421 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,421 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,422 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,422 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,422 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,422 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,422 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,422 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,422 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,422 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,423 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,423 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,423 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,423 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,423 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,424 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,424 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,424 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,424 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,424 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,424 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,424 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,425 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,425 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,425 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,425 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,425 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,425 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,425 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,425 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,426 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,426 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,426 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,426 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,426 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,426 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,426 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,426 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,427 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,427 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,427 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,427 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,427 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,427 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,427 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,428 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,428 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,428 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,428 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,428 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,428 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,429 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,429 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,429 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,429 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,429 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,429 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,429 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,429 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,430 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,430 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,430 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,430 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,430 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,430 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,430 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,431 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,431 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,431 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,431 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,431 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,431 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 10:37:04,431 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,432 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 10:37:04,432 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,434 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,434 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,434 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,434 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,434 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,434 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,434 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,435 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,435 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,435 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,435 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,436 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,436 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,436 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,436 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,436 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,436 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,436 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,437 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,437 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,437 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,437 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,437 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,438 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,438 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,438 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,438 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,438 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,438 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,439 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,439 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,439 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,439 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,439 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,439 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,439 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,440 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,440 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,440 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,440 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,440 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,440 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 10:37:04,440 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,441 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 10:37:04,441 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,444 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,444 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,444 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,444 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,444 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,444 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,445 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,445 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,445 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,445 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,445 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,446 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,446 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,446 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,446 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,446 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,446 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,446 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,446 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,447 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,447 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,447 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,447 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,447 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,447 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,447 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,447 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,448 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,448 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,448 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,448 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,448 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,448 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 10:37:04,448 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,449 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 10:37:04,449 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,450 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,450 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,451 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,451 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,451 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,451 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,451 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,451 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,451 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,452 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,452 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,452 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,452 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,452 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,452 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,452 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,452 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,453 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,453 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,453 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,453 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,453 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,453 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,453 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,454 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,454 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,454 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,454 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,454 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,454 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,455 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,455 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,455 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,455 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,455 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,455 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,455 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,455 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,456 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,456 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,456 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,456 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 10:37:04,456 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,456 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 10:37:04,456 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,457 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,457 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,457 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,457 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,457 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,457 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,457 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,458 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,458 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,458 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,458 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,458 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,458 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,459 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,459 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,459 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,459 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,459 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,459 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,459 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,460 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,460 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,460 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,460 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,460 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,460 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,460 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,461 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,461 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,461 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,461 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,461 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,461 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,461 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,461 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,462 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,462 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,462 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,462 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,462 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,462 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,463 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,463 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,463 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,463 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,463 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,463 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,464 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,464 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,464 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,464 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,464 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,464 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,464 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,465 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,465 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,465 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,465 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,465 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,465 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,465 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,465 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,466 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,466 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,466 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,466 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,466 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,466 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,467 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,467 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,467 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,467 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,467 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,467 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,468 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,468 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,468 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,468 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,468 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,468 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,468 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,469 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,469 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,469 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,469 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,469 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,469 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,469 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,469 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,469 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,470 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,470 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,470 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,470 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,470 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,470 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,470 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,471 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,471 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,471 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,471 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,471 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,472 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,472 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,472 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,472 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,472 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,472 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,472 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,473 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,473 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,473 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,473 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,473 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,473 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,473 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,473 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,474 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,474 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,474 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,474 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,474 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,474 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,474 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,474 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,475 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,475 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,475 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,475 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,475 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,475 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,476 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,476 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,476 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,476 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,476 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,477 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,477 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,477 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,538 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,538 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,538 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,538 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,538 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,539 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,539 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,539 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,539 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,539 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,539 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,540 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,540 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,540 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,540 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,540 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,541 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,541 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,541 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,541 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,541 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,541 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,541 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,542 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,542 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,542 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,542 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,542 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,542 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,542 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,543 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,543 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,657 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,658 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,658 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,658 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,658 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,658 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,658 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,658 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,658 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,659 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,659 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,659 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,659 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,659 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,659 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,660 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,660 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,660 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,661 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,661 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,661 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,661 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,661 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,661 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,661 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,661 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,662 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,662 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,662 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,769 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,769 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,769 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,770 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,770 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,770 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,770 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,770 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,771 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,771 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,771 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,771 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,771 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,771 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,771 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,771 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,772 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,772 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,772 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,772 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,772 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,772 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,772 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,772 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,773 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,773 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,773 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,773 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,773 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,892 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,892 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,892 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,892 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,892 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,893 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,893 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,893 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,893 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,893 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,893 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,893 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,893 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,894 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,894 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,894 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,894 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,894 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,894 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,895 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,895 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,895 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,895 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:04,895 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:04,895 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:04,896 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:04,896 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:04,896 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:04,896 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:04,896 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:04,896 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:04,896 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,011 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,012 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,012 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,012 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,012 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,012 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,012 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,012 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,012 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,013 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,013 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,013 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,013 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,013 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,013 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,014 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,014 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,014 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,014 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,014 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,014 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,015 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,015 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,015 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,015 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,015 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,015 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,015 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,016 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,121 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,121 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,121 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,121 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,121 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,122 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,122 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,123 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,123 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,123 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,123 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,123 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,123 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,124 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,124 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,124 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,124 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,124 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,125 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,125 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,125 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,125 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,125 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,125 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,125 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,126 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,126 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,126 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,126 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,236 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,237 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,237 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,237 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,237 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,237 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,238 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,238 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,238 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,238 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,238 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,238 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,238 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,238 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,239 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,239 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,239 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,239 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,239 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,239 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,240 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,240 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,240 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,240 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,241 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,241 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,241 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,241 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,241 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,241 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,241 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,241 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,355 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,355 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,355 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,355 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,355 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,355 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,355 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,356 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,356 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,356 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,356 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,357 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,357 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,357 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,357 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,357 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,357 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,357 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,357 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,358 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,358 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,358 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,358 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,358 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,358 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,358 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,358 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,359 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 10:37:05,359 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 10:37:05,462 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 10:37:05,462 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 10:37:05,462 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 10:37:05,462 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 10:37:05,462 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 10:37:05,462 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 10:37:05,462 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 10:37:05,464 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-28 10:37:05,465 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2018-11-28 10:37:05,465 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-28 10:37:05,465 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-28 10:37:05,465 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-28 10:37:05,466 INFO L518 LassoAnalysis]: Proved termination. [2018-11-28 10:37:05,466 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~1) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~1 Supporting invariants [] [2018-11-28 10:37:05,466 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-28 10:37:05,475 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 10:37:05,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:37:05,581 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 10:37:05,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 10:37:05,634 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 10:37:05,732 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 10:37:05,732 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 4 loop predicates [2018-11-28 10:37:05,732 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 285529 states and 500061 transitions. cyclomatic complexity: 214631 Second operand 5 states. [2018-11-28 10:37:07,110 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 285529 states and 500061 transitions. cyclomatic complexity: 214631. Second operand 5 states. Result 458900 states and 803493 transitions. Complement of second has 8 states. [2018-11-28 10:37:07,110 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-28 10:37:07,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-28 10:37:07,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 10208 transitions. [2018-11-28 10:37:07,115 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10208 transitions. Stem has 142 letters. Loop has 64 letters. [2018-11-28 10:37:07,116 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 10:37:07,116 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10208 transitions. Stem has 206 letters. Loop has 64 letters. [2018-11-28 10:37:07,116 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 10:37:07,116 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10208 transitions. Stem has 142 letters. Loop has 128 letters. [2018-11-28 10:37:07,117 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 10:37:07,117 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 458900 states and 803493 transitions. [2018-11-28 10:37:08,523 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 10:37:08,523 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 458900 states to 0 states and 0 transitions. [2018-11-28 10:37:08,523 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-28 10:37:08,523 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-28 10:37:08,524 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-28 10:37:08,524 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 10:37:08,524 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 10:37:08,524 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 10:37:08,524 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 10:37:08,524 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 10:37:08,524 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 6 states. [2018-11-28 10:37:08,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 10:37:08,524 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-28 10:37:08,524 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-28 10:37:08,524 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-28 10:37:08,524 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 10:37:08,524 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-28 10:37:08,524 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-28 10:37:08,524 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-28 10:37:08,524 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-28 10:37:08,524 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 10:37:08,524 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 10:37:08,525 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 10:37:08,525 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 10:37:08,525 INFO L442 BuchiCegarLoop]: ======== Iteration 22============ [2018-11-28 10:37:08,525 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-28 10:37:08,525 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 10:37:08,525 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-28 10:37:08,529 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 28.11 10:37:08 BoogieIcfgContainer [2018-11-28 10:37:08,529 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-28 10:37:08,529 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-28 10:37:08,529 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-28 10:37:08,529 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-28 10:37:08,530 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 10:33:38" (3/4) ... [2018-11-28 10:37:08,532 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-28 10:37:08,532 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-28 10:37:08,532 INFO L168 Benchmark]: Toolchain (without parser) took 217674.41 ms. Allocated memory was 1.0 GB in the beginning and 7.7 GB in the end (delta: 6.7 GB). Free memory was 949.6 MB in the beginning and 3.9 GB in the end (delta: -2.9 GB). Peak memory consumption was 3.8 GB. Max. memory is 11.5 GB. [2018-11-28 10:37:08,532 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 976.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 10:37:08,532 INFO L168 Benchmark]: CACSL2BoogieTranslator took 539.14 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 949.6 MB in the beginning and 1.1 GB in the end (delta: -146.9 MB). Peak memory consumption was 37.3 MB. Max. memory is 11.5 GB. [2018-11-28 10:37:08,533 INFO L168 Benchmark]: Boogie Procedure Inliner took 208.25 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 59.6 MB). Peak memory consumption was 59.6 MB. Max. memory is 11.5 GB. [2018-11-28 10:37:08,533 INFO L168 Benchmark]: Boogie Preprocessor took 229.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 976.5 MB in the end (delta: 60.4 MB). Peak memory consumption was 60.4 MB. Max. memory is 11.5 GB. [2018-11-28 10:37:08,533 INFO L168 Benchmark]: RCFGBuilder took 6384.32 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 356.0 MB). Free memory was 976.5 MB in the beginning and 921.1 MB in the end (delta: 55.5 MB). Peak memory consumption was 411.5 MB. Max. memory is 11.5 GB. [2018-11-28 10:37:08,533 INFO L168 Benchmark]: BuchiAutomizer took 210307.84 ms. Allocated memory was 1.5 GB in the beginning and 7.7 GB in the end (delta: 6.2 GB). Free memory was 921.1 MB in the beginning and 3.9 GB in the end (delta: -3.0 GB). Peak memory consumption was 3.3 GB. Max. memory is 11.5 GB. [2018-11-28 10:37:08,533 INFO L168 Benchmark]: Witness Printer took 2.50 ms. Allocated memory is still 7.7 GB. Free memory is still 3.9 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 10:37:08,535 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 976.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 539.14 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 949.6 MB in the beginning and 1.1 GB in the end (delta: -146.9 MB). Peak memory consumption was 37.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 208.25 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 59.6 MB). Peak memory consumption was 59.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 229.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 976.5 MB in the end (delta: 60.4 MB). Peak memory consumption was 60.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 6384.32 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 356.0 MB). Free memory was 976.5 MB in the beginning and 921.1 MB in the end (delta: 55.5 MB). Peak memory consumption was 411.5 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 210307.84 ms. Allocated memory was 1.5 GB in the beginning and 7.7 GB in the end (delta: 6.2 GB). Free memory was 921.1 MB in the beginning and 3.9 GB in the end (delta: -3.0 GB). Peak memory consumption was 3.3 GB. Max. memory is 11.5 GB. * Witness Printer took 2.50 ms. Allocated memory is still 7.7 GB. Free memory is still 3.9 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 23 terminating modules (21 trivial, 2 deterministic, 0 nondeterministic). One deterministic module has affine ranking function currentFloorID and consists of 14 locations. One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 21 modules have a trivial ranking function, the largest among these consists of 9 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 210.2s and 22 iterations. TraceHistogramMax:1. Analysis of lassos took 15.2s. Construction of modules took 38.6s. Büchi inclusion checks took 44.0s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 17. Automata minimization 56.8s AutomataMinimizationTime, 21 MinimizatonAttempts, 4390094 StatesRemovedByMinimization, 21 NontrivialMinimizations. Non-live state removal took 47.6s Buchi closure took 2.5s. Biggest automaton had 285529 states and ocurred in iteration 19. Nontrivial modules had stage [2, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 493449 SDtfs, 1394657 SDslu, 1707446 SDs, 0 SdLazy, 93213 SolverSat, 10965 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 38.6s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI19 SILT2 lasso0 LassoPreprocessingBenchmarks: Lassos: inital195 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf1054 smp54 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 17ms VariablesStem: 0 VariablesLoop: 9 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 136 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 2 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 4.7s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...